think I've got Alexa, how to get rid of that pest?

Discussion in 'malware problems & news' started by Annatur, Jun 21, 2004.

Thread Status:
Not open for further replies.
  1. Annatur

    Annatur Guest

    Hi Everyone:

    I'm quite new in this forum, so I'll try to be concise.
    My connection looks to have some activities even when I am not working, and with all tasks closed. And of course it began to go slowly and sometimes rejecting to go to some web links like internet portals and so...

    Here I post the HJT log so as someone could help me in this annoyance trouble:

    Logfile of HijackThis v1.97.7
    Scan saved at 18:42:38, on 16/06/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\slserv.exe
    C:\Archivos de programa\Trend Micro\PC-cillin 2002\Tmntsrv.exe
    C:\Archivos de programa\Trend Micro\PC-cillin 2002\PCCPFW.exe
    C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    C:\Archivos de programa\Trend Micro\PC-cillin 2002\pccguide.exe
    C:\Archivos de programa\Trend Micro\PC-cillin 2002\PCCClient.exe
    C:\Archivos de programa\Trend Micro\PC-cillin 2002\Pop3trap.exe
    C:\Archivos de programa\Trend Micro\PC-cillin 2002\WebTrap.EXE
    C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\John\Mis documentos\Sasser virus\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O17 - HKLM\System\CCS\Services\Tcpip\..\{A9996AD6-9E29-45B5-ACC2-ADE5F52FF4AA}: NameServer = 62.36.225.150 62.37.228.20


    Any help would be very appreciated
     
  2. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Annatur,

    Please read and follow these instructions to the letter, and post your complete log file on that same forum. In order to do so, you'll have to register as a forum member first. Our experts will attend your issue after that as soon as time permits.

    regards.

    paul
     
Loading...
Thread Status:
Not open for further replies.