Help - Search - Members - Calendar
Full Version: Here we go again.........HELP!!
Malwarebytes Forum > Computer Help > Malware Removal - HijackThis Logs
bellio
Ok, I was using this site to remove some type of infection and I didn't get to complete the last step. So let's start over shall we?

Awhile ago, my credit card information was stolen off of my computer. How do I know? I've only used the card one time for an online purchase. Plus I've come back to my computer after shutting down my internet connection and it is back on again. And my computer is slowwwwwwwwww. So I've done the whole HJT logs, OTM, Kaspersky, etc.... Guess I'm going to do it all again.

Anybody want to help?

Thanks!
bellio
QUOTE (bellio @ Sep 15 2009, 07:48 PM) *
Ok, I was using this site to remove some type of infection and I didn't get to complete the last step. So let's start over shall we?

Awhile ago, my credit card information was stolen off of my computer. How do I know? I've only used the card one time for an online purchase. Plus I've come back to my computer after shutting down my internet connection and it is back on again. And my computer is slowwwwwwwwww. So I've done the whole HJT logs, OTM, Kaspersky, etc.... Guess I'm going to do it all again.

Anybody want to help?

Thanks!



Hello?
screen317
Hi,

What symptoms of infection are you experiencing?

Update MBAM, run a Quick Scan, and post its log.

Next, please register (it's free, don't worry) with PCPitStop and run the full tests here. When the tests are complete, a results page will pop up. Copy and paste the URL of the Results screen and post it here for me.

-screen317
bellio
Chris,

Thank you for helping me.

Ok, here is the URL from the PitStop site.

http://www.pcpitstop.com/betapit/sec.asp?conid=22695772


And here is the logfile.

Malwarebytes' Anti-Malware 1.41
Database version: 2818
Windows 5.1.2600 Service Pack 3

9/17/2009 7:27:34 PM
mbam-log-2009-09-17 (19-27-33).txt

Scan type: Quick Scan
Objects scanned: 140444
Time elapsed: 23 minute(s), 9 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)
bellio
I forgot to tell you the symptoms.

PC runs slow for starters. Also, my internet connection will start up on its own. Awhile ago my credit card number was used on a site and my credit card company alerted me. Pretty sure it came from my PC being hacked.

bellio
Bump
screen317
Ack sorry for the delay-- PM me if I take more than 24 hours to respond.

PCPitStop noted several things that you can do to improve the shape your computer is in.

Pay particular attention to these items:


• Upgrade disk space (Drive C):
You have very little free disk space. Try to free up some space by uninstalling programs that you no longer use.


• Delete Temporary Files:

Please download CCleaner and save it to your desktop.
  • Run the CCleaner installer.
  • During installation process, please UNCHECK "Add CCleaner Yahoo! Toolbar".
  • Please do NOT run a scan yet!
Now, open CCleaner:
  • Click the "Windows" tab.
  • Select the following:
    • Check everything under the "Internet Explorer" section.
    • Check everything under the "Windows Explorer" section.
    • Check everything under the "System" section.
    • Check ONLY "Old Prefetch data" under the "Advanced" section.
  • Then, click the "Applications" tab:
    • CHECK everything there.
  • Next, click the "Options" button in the left pane, then click the "Advanced" button:
    • CHECK : "Only delete files in Windows Temp folders older than 48 hours".
  • Next, click the "Cleaner" button in the left pane, then click the "Run Cleaner" button (bottom right), click "OK" at the prompt.
  • When done, please exit CCleaner.
CAUTION: Please do NOT use the "Issues" button in the left pane. This is a built-in registry cleaner. If you don’t know how to use it, you may cause irreparable damage to your system.


• Reduce System Restore space (Drive C):
Right click My Computer and click Properties. Select the System Restore tab, and move the slider to 3%. You're pretty much wasting disk space otherwise.


• Defragment files (Drive C)
Defragmenting is a must. It's one of the large reasons for system slowdowns. I use JkDefrag to defragment. You can use it forever. I recommend installing it and defragmenting as soon as possible


• Update outdated device drivers:
Right click My Computer, click Properties, click the Hardware tab, and then click Device Manager. Update the drivers for your Sound card, Video card, Ethernet card. Use the trial of Driver Alert from PCPitStop (click • Update outdated device drivers), to see which drivers should be updated.


Also take the time to take a look at the other tips PCPitStop reported. I've just highlighted some of the more important ones.


After doing all of that, restart your computer and use it normally for a while. See if performance improves.

-screen317
bellio
Chris,

Thanks for the suggestions. However, JKDefrag is taking a very long time to run. Any other suggestions on how to make it run faster? I have let it run for 2 days and nights and it's only on the first zone at 24%.

screen317
JKDefrag is no longer being updated; it is now MyDefrag.

Give it a try.
bellio
I meant MyDefrag. How can I make it go faster? This is taking forever.





QUOTE (screen317 @ Sep 24 2009, 02:07 PM) *
JKDefrag is no longer being updated; it is now MyDefrag.

Give it a try.



screen317
If it is taking a long time, skip it, try the other steps, and see if performance improves.

Try using Windows' defragmenting program instead (Start --> Programs --> Accessories --> System Tools).
screen317
Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.