Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

My HiJack This Log


  • This topic is locked This topic is locked

#16
Daemon

Daemon

    Security Expert

  • Retired Staff
  • 4,356 posts
  • MVP
Yes, infections can masquerade as those files but that isn't what you had - I would have sorted that for you earlier.

What did you do between posting your last HJT log and experiencing the log-on problems - I didn't give you any instructions, I need to know what you did to help further.
  • 0

Advertisements


#17
louisethelibrarian

louisethelibrarian

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Also--while nothing shows up under Applications in the Task Manager Window, Under processes the following are running:

System Idle Process
System
smss.exe
csrss.ese
winlogon.exe
services.exe
lsass.exe
WZQKPICK.EXE
spoolss.exe
RpcSs.exe
nddeagnt.exe
Explorer.exe
pstores.exe
MSTask.exe
taskmgr.exe
loadwc.exe
ddhelp.exe
WebshotsTray.exe
qttask.exe
mmod.exe
  • 0

#18
louisethelibrarian

louisethelibrarian

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Let's see; I'm trying to remember what I did after posting the log. I went into my regular library circulation and cataloguing program and exited. I checked my task manager, tried to end the lsass.exe file, was told it was locked, exited out of task manager, checked my email for work and home, and that's all. ANd no, I'm not like all of my students here who always deny doing anything! :)

Louise
  • 0

#19
Daemon

Daemon

    Security Expert

  • Retired Staff
  • 4,356 posts
  • MVP
hehe - I thought you would fess up :tazz:

Those files are OK - just because they are running doesn't make them bad. Can you boot into Safe Mode - tap F8 after the BIOS has loaded?
  • 0

#20
louisethelibrarian

louisethelibrarian

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
This is what I get; I never see BIOS loading:

OS Loader v. 4.00
N5 Detect
OS Loader
Press Space Bar now to invoke
MS WIN NT
1 System Processor [64 Mb Memory}
. . . . . . . . . . . .

After this, the computer keeps running, but the screen goes dark.

Louise
  • 0

#21
louisethelibrarian

louisethelibrarian

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
I tried selecting the other operating mode when I logged on, and we're up and running! Yeeha!!! Thank you so much for all of your help; you've been wonderful and very patient. I'll be sure to recommend you to everyone I work with, and may be back in the future!

Louise
  • 0

#22
Daemon

Daemon

    Security Expert

  • Retired Staff
  • 4,356 posts
  • MVP
You're welcome - glad to help :tazz:

To help keep you clean follow the recommendations in Tony's article here:

So how did I get infected in the first place?



As this problem has been resolved the topic will be closed. If you need this topic reopened, please email the moderating team - be sure to include the address of the thread and the name you posted under.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP