Computing.Net > Forums > Security and Virus > Help with hijackthis log

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Help with hijackthis log

Reply to Message Icon

Original Message
Name: eva2002
Date: August 3, 2006 at 09:12:00 Pacific
Subject: Help with hijackthis log
OS: Win XP SP2
CPU/Ram: 1GB Ram
Model/Manufacturer: none
Comment:

I got 2 possibly nasty from hijackthis analyzer and need help to see if they are really nasty

MSCOMCTL.OCX
MSINET.OCX

since instructions states not to post the log yet unless someone ask for it so I can only leave it with the filenames. please help ^^


Report Offensive Message For Removal


Response Number 1
Name: XpUser4Real
Date: August 3, 2006 at 13:17:49 Pacific
Reply: (edit)

Any problems that you are not sure can be googled to see what is said about them. It's a great way to check out what the problem is.

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 2
Name: Derek
Date: August 3, 2006 at 14:55:51 Pacific
Reply: (edit)

Have you any problem symptoms?

They look valid to me:

MSCOMCTL.OCX (Windows Common Controls ActiveX Control DLL).
Normally located in c:\windows\system32

MSINET.OCX (Microsoft Internet Transfer Control).
Normally located in either:
c:\windows\system
or
c:\windows\system32

DerekW


Report Offensive Follow Up For Removal

Response Number 3
Name: eva2002
Date: August 3, 2006 at 17:34:37 Pacific
Reply: (edit)

hmm...the problem is that my zonealarm anti-spyware scan detected backdoor.win32.mirc.based. therefore I am trying to hunt down the infected file if there is.

I used avg, zonealarm anti-spyware (za), spybot, a2 and hijackthis to scan. no detection but when I run irc, I got it and za detected it (of course I deleted the infected file straight away).


Report Offensive Follow Up For Removal

Response Number 4
Name: Derek
Date: August 3, 2006 at 19:15:26 Pacific
Reply: (edit)

This might help:

SEE TURN OFF SYSTEM RESTORE SUGGESTION

For #7 (after reboot) you run the scanners that showed this up.


DerekW


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 5 Days.
Discuss in The Lounge
Poll History




Data Recovery Software