Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Reviewing malware logs

Started by dewey86 , Mar 26 2008 01:18 PM

Please log in to reply

#1
dewey86

Posted 26 March 2008 - 01:18 PM

New Member

Member
1 posts

PC-cillin Internet Security software detected TROJ_AGENT.DLM trojan. It identified the wsil32.dll file as the detected file but couldn't delete the file. PC-cillin and Trend-Micro's solutions did not work - "Access denied" when trying to delete the file.

After reviewing some guidance in this forum, I downloaded ComboFix and ran it. The log indicated that the wsil32.dll file was deleted. Checking for the file resulted in NOT finding C:\WINDOWS\SYSTEM32\AppCert. Apparently, ComboFix eliminated the file and directory. My system seems to be running faster and PC-cillin is not detecting the TROJ_AGENT.DLM trojan/virus any more.

Then I ran HiJackThis.

The point to my message is I would like some assistance in the review of the ComboFix and HiJackThis logs to see if you see any other files/directories that are linked to malware that should be removed or any suggestions for improving the health of my system.