[rayh34]

Last night I did a reboot, then this morning came to a black screen, was able to manually start explorer.exe which brought up the desktop. Ran McAfee, Windows Defender, Ad-Aware SE, Spybot, found two keyloggers, "Smitfraud-C.Keylogger". Have several suspicious entries in the registery, after all this under Run, RunServices, and Run once. Was hoping for some feed back on these. Thank you in advance for your time and effort.

Attached Files

•  hijackthis.zip   3.06KB   77 downloads

[Advertisements]

Hello rayh34 and welcome to the G2G HijackThis forum. Let's see what's running.

Note: You must be logged on to the system with an account that has Administrator privileges to run this program.

Download WinPFind3u.exe to your Desktop and double-click on it to extract the files. It will create a folder named WinPFind3u on your desktop.

• Close ALL OTHER PROGRAMS.
• Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program.
• Under Additional Scans click the checkboxes in front of the following items to select them:
  • Reg - Policy Settings
    File - Additional Folder Scans
    
• Now click the Run Scan button on the toolbar.
• Let it run unhindered until it finishes.
• When the scan is complete Notepad will open with the report file loaded in it.
• Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Use the Add Reply button and Copy/Paste the information back here (do not attach it as a file). I will review it when it comes in. If, after posting, the last line is not < End of Report > then the log is too big to fit into a single post and you will need to split it into multiple posts.

Cheers.

OT

[OldTimer]

Hello rayh34 and welcome to the G2G HijackThis forum. Let's see what's running.

Note: You must be logged on to the system with an account that has Administrator privileges to run this program.

Download WinPFind3u.exe to your Desktop and double-click on it to extract the files. It will create a folder named WinPFind3u on your desktop.

• Close ALL OTHER PROGRAMS.
• Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program.
• Under Additional Scans click the checkboxes in front of the following items to select them:
  • Reg - Policy Settings
    File - Additional Folder Scans
    
• Now click the Run Scan button on the toolbar.
• Let it run unhindered until it finishes.
• When the scan is complete Notepad will open with the report file loaded in it.
• Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Use the Add Reply button and Copy/Paste the information back here (do not attach it as a file). I will review it when it comes in. If, after posting, the last line is not < End of Report > then the log is too big to fit into a single post and you will need to split it into multiple posts.

Cheers.

OT