Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic of your own. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!
System32/printer.exe problem [RESOLVED], My god i hate this!
Cair
post Aug 20 2007, 06:24 PM
Post #1


New Member
*
Posts: 9
OS: WindowsXP Home Edition



Okay Okay... you can start flaming me after you figure out my problem >.< im only 15 and i'm not that great at computers

Recently my computer has been acting weird, freezing during game programs and of course weird things going on. after downloading AVG free edition. ( i will list below step by step of my actions )

1) check up-dates for AVG (downloaded it)
2) Scan full system
3) 6 threats! 3 Obfustat.IQC and 3 Obfustat.IHB and importantly 2 of the files have infected
C:\Windows\system32\printer.exe & C:\Windows\system32\winavxx.exe
4) Then of course i clicked heal!
5)But then errors started coming up, i can't access some things like Control Panel or Properties!
6)So i restarted comp and rebooted with an error in my face "Can't Find C:\Windows\system32\printer.exe
7)I searched the internet for topics on this and read all of em.. still not sure what to do
8)I've read several articles of people posting their hijackthis log and asking for help.. which is one of my options
option a. post hijackthis log and ask for help
option b. run regedit and edit bunch of stuff i dont know
option c. start panicking and reformat comp...
9) after all that.. i've posted this with my hijackthis log

Hijackthis log:
Logfile of HijackThis v1.99.1
Scan saved at 5:01:42 PM, on 8/20/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\Program Files\ATI Multimedia\main\ATIDtct.EXE
C:\Program Files\ATI Multimedia\RemCtrl\ATIRW.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\rundll32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\Grisoft\AVG7\avgvv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Jeremiah\Local Settings\Temp\Temporary Directory 1 for hijackthis[1].zip\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://yahoo.sbc.com/dsl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/customize/sbcydsl/defa.../search/ie.html
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\System32\printer.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

Please help me.. im in a hurry.. i need to work on some projects for school, i would like to thank those who help and acknowledge my need!

Sincerely,Alex
Go to the top of the page
 
+Quote Post

Posts in this topic
- Cair   System32/printer.exe problem [RESOLVED]   Aug 20 2007, 06:24 PM
- - don77   Hello Alex and welcome your log got cut off coul...   Aug 20 2007, 06:42 PM
- - Cair   I'm so sorry.. im such an idiot.. this is my 1...   Aug 20 2007, 06:50 PM
- - don77   Don't worry your doing fine Download Combo...   Aug 20 2007, 06:52 PM
- - Cair   Heres the log and i assume that the reboot of the ...   Aug 20 2007, 07:07 PM
- - don77   Yes combofix rebooted the computer in order to del...   Aug 20 2007, 07:26 PM
|- - Cair   QUOTE(don77 @ Aug 20 2007, 08:26 PM) Yes ...   Aug 20 2007, 07:40 PM
- - don77   Thats fine go ahead and make the folder for HJT th...   Aug 20 2007, 07:48 PM
- - Cair   EDIT: im not sure if you want both logs or not, so...   Aug 20 2007, 07:59 PM
- - don77   1. Please download The Avenger by Swandog46 to you...   Aug 20 2007, 08:10 PM
- - Cair   okay... and i also had an error for some reason wh...   Aug 20 2007, 08:21 PM
- - don77   Looks like it did what we needed it to do the ma...   Aug 20 2007, 08:28 PM
- - Cair   Thanks soo much.. im still in the process , after ...   Aug 20 2007, 08:34 PM
- - don77   Dr web is an online scan that will clean for you   Aug 20 2007, 08:38 PM
- - Cair   My AVG detected threat when DR. web was trying to ...   Aug 20 2007, 08:43 PM
- - don77   Thats fine Post the log when its completed, I m ...   Aug 20 2007, 08:47 PM
- - Cair   Here's da log and thanks for everything , have...   Aug 20 2007, 09:31 PM
- - don77   Nice job your log is clean ! How is it runn...   Aug 21 2007, 05:21 AM
- - don77   Since this issue appears to be resolved ... this T...   Aug 23 2007, 06:50 PM


Closed TopicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Collapse

> Similar Topics

    Topic Title Replies / Views Topic Information
No New Posts   8 / 2,125 15th November 2007 - 08:25 PM
Nicdez started - last by JSntgRvr
No new   14 / 1,236 12th May 2008 - 12:41 PM
beargogo started - last by Essexboy
No new   17 / 1,502 8th June 2008 - 04:14 PM
Spiff_Johnson started - last by Rorschach112
No New Posts   11 / 975 4th August 2008 - 05:59 AM
Redavni started - last by sage5

RSS Time is now: 21st November 2009 - 01:53 PM

Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks mentioned on this page are the property of their respective owners.

© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy | Advertising