iobit 360 hijack scan resuts

[Trina Whitacre-Fennell]

I believe I may have a virus, but scans are not picking up. May be in my operating system, start processes. MSoft essentials and Iobit 360 not detecting either. But my laptop has all the symptoms of malware/virus. I am sending Iobit 360 Hi-Jack Scan results for your review. Anyihelp or recommendations you can offer would be greatly appreciated.

 

Thank you for your time and consideration on this matter

 

Trina Whitacre-Fennell

tfennell @inbox.com

11/6/10

[enoskype]

Hi Trina Whitacre-Fennell,

 

Where is the Hijack scan result?

 

For your and our members' safety, do not post any e-mail address please. It is delinked.

 

Follow the procedure in Guidelines for requesting malware removal assistance thread for a Malware Fighter to respond.

 

Cheers.

[Trina Whitacre-Fennell]

Hi Trina Whitacre-Fennell,

 

Where is the Hijack scan result?

 

For your and our members' safety, do not post any e-mail address please. It is delinked.

 

Follow the procedure in Guidelines for requesting malware removal assistance thread for a Malware Fighter to respond.

 

Cheers.

The result is with my posts. It did not upload with e-mail the first time. And, I apologize for the address, but, it would not upload with out a specified destination of some kind. No individual names were used, as, I do not know any one persons name. Thanks for your expediency on my post. It is greatly appreciated.

 

Trina

[Trina Whitacre-Fennell]

Default hijack scan results

Logfile of IObit HijackScan v1.0.2.0

Scan saved at 15:53:56, on 2010-11-6

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\IObit\IObit Security 360\IS360srv.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\tcpsvcs.exe

C:\WINDOWS\System32\alg.exe

C:\Program Files\IObit\IObit Security 360\IS360tray.exe

C:\Program Files\Microsoft Security Essentials\msseces.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

c:\Program Files\Microsoft Security Essentials\MsMpEng.exe

C:\Program Files\IObit\IObit Security 360\is360.exe

C:\Program Files\IObit\IObit Security 360\a_hijackscan.exe

C:\Program Files\Mozilla Firefox\firefox.exe

 

O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKCU|\Software\Microsoft\Windows\CurrentVersion\Ru n\: [DWQueuedReporting] "c:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe " -t

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Ru n\: [ATIModeChange] Ati2mdxx.exe

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Ru n\: [iObit Security 360] "C:\Program Files\IObit\IObit Security 360\IS360tray.exe" /autostart

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Ru n\: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Ru n\: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Ru n\: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM|\Software\Microsoft\Windows\CurrentVersion\Ru n\: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O9 - Extra button: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe

O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8}OGACheckControl.LegitCheck.1 - http://go.microsoft.com/fwlink/?linkid=58813

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}Java Plug-in 1.6.0_22 - http://java.sun.com/update/1.6.0/jin...ndows-i586.cab

O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}Java Plug-in 1.6.0_22 - http://java.sun.com/update/1.6.0/jin...ndows-i586.cab

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}Java Plug-in 1.6.0_22 - http://java.sun.com/update/1.6.0/jin...ndows-i586.cab

O23 - Service: Ati HotKey Poller (Ati HotKey Poller) - Unknown - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: GameConsoleService (GameConsoleService) - Unknown - C:\Program Files\WildGames\Game Console.dll

O23 - Service: IS360service (IS360service) - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - PC Tools - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe

[So_sad]

Hello Trina :smile:

 

The Hijack log isn't showing anything bad, but that doesn't mean there is no infection present ; Hijack scans just cannot pick up every infection.

 

Now, when you say your laptop has all the symptoms of an infection, could you be more specific, please ? I need to know exactly what the symptoms are. If you are being redirected while searching, let us know where you are being redirected to. If you are getting annoying popups or fake infection warnings, please give us names of what you see.

 

Thanks...

 

====