Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

question about O20 entry


  • Please log in to reply

#1
benanna

benanna

    Member

  • Member
  • PipPip
  • 10 posts
I am new to HijackThis analysis, so please bear with me.

About a month ago, I noticed that our DSL internet connection was much slower than normal. A few days ago, I got a call from my ISP saying that I must have a virus, because they were getting spam from my computer. I then noticed that when I am connected to the internet, my computer is continuously transmitting packets, even when I don't have any applications running. I have gone through the whole "Required steps" list over the last couple of days, running Adaware, Spybot, Ewido, and the TrendMicro online scan, but I still had a slow connection and the computer was still continuously uploading. I then installed ZoneAlarm and noticed that if I block access to winlogon.exe, the computer stops the continuous upload.

I have run HijackThis, and there are three O20 entries. Two of them are listed as file missing, but the third is "iclmirqv.dll", which was last modified 2/9/2006, about the same time I started having problems. I checked the O20 list at http://www.castlecops.com/O20.html, but "iclmirqv.dll" is not listed. A google search for this file also turned up nothing.

Any thoughts or recommendations on next steps? Thanks for your help.


Please do not post hijack this logs in any other forum than the malware forum. your log has been removed and re-attached as a text file
  • 0

Advertisements


#2
dsenette

dsenette

    Je suis Napoléon!

  • Administrator
  • 26,019 posts
  • MVP
Please go to the malware forum in my signature and follow the instructions at the top....Especially the CLICK HERE .

That will give you several steps that will help you clean up 70 percent of all problems by yourself. If at the end of the process you are still having difficulty--and you may not be-- then post a hijackthis log in THAT forum.

If you are still having problems after getting a clean bill of health from the malware expert, please return to this thread.
  • 0

#3
benanna

benanna

    Member

  • Topic Starter
  • Member
  • PipPip
  • 10 posts
I'm sorry, it looks like I posted in the wrong forum. I'll repost in the correct forum. Thanks!
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP