Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Reviewing malware logs

Started by dewey86 , Mar 26 2008 01:18 PM

Please log in to reply

#1
dewey86

Posted 26 March 2008 - 01:18 PM

New Member

Member
1 posts

PC-cillin Internet Security software detected TROJ_AGENT.DLM trojan. It identified the wsil32.dll file as the detected file but couldn't delete the file. PC-cillin and Trend-Micro's solutions did not work - "Access denied" when trying to delete the file.

After reviewing some guidance in this forum, I downloaded ComboFix and ran it. The log indicated that the wsil32.dll file was deleted. Checking for the file resulted in NOT finding C:\WINDOWS\SYSTEM32\AppCert. Apparently, ComboFix eliminated the file and directory. My system seems to be running faster and PC-cillin is not detecting the TROJ_AGENT.DLM trojan/virus any more.

Then I ran HiJackThis.

The point to my message is I would like some assistance in the review of the ComboFix and HiJackThis logs to see if you see any other files/directories that are linked to malware that should be removed or any suggestions for improving the health of my system.