CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 952
Comments: 28
block bottom
spacer spacer

I can't see if it's malware, or just a common nessecary file
Goto page Previous  1, 2
 
Post new topic   Reply to topic       All -> FavForums -> Unknown Files [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
IP: 71.251.*.*

Guest






PostPosted: Wed Aug 02, 2006 12:59 am    Post subject:
Reply with quote

So what you guys tell me all things that are bad that showed up on my log and then give me instructions afterwards. Im just curious as to how it works but yeah i deffinetley dont like malware and the like.

Eitherway i sitll have to run eido in safe mode and then run this other program.

Back to top
IP: 71.251.*.*

Guest






PostPosted: Wed Aug 02, 2006 1:04 am    Post subject:
Reply with quote

Anonymous wrote:
So what you guys tell me all things that are bad that showed up on my log and then give me instructions afterwards. Im just curious as to how it works but yeah i deffinetley dont like malware and the like.

Eitherway i sitll have to run eido in safe mode and then run this other program. Cause im not completely done with the MPR

Back to top
Mere_Mortal

1st Responder


Joined: Apr 10, 2004
Posts: 4191
Location: Kidderminster
1st Responders Rootkit Responders

PostPosted: Wed Aug 02, 2006 1:15 am    Post subject:
Reply with quote

You don't have to do anything Wink

However, I do advise that you follow an experienced recommendation because, as much as it might seem to be of little concern or simply a chore, certain types of malware have the disgraceful ability to capture and steal sensitive information. If you value your privacy and finances (assuming you use your computer for banking, shopping, etc), then these threats must be removed.


_________________
[Malware Removal and Prevention] [Malware Complaints]
Back to top
View users profile Send private message Visit posters website
nosirrah

Security Expert
Special Response Team

Joined: Apr 19, 2006
Posts: 6299
Location: USA
MIRT MVP Premium Rootkit Responders Security Experts SRT

PostPosted: Wed Aug 02, 2006 1:17 am    Post subject:
Reply with quote

Make sure to update Ewido before you run its scanner .

This : http://www.download.com/SUPERAntiSpyware-Free-Edition/3000-8022_4-10564983.html is another outstanding malware scanner . Install and update it and then run its scanner in safe mode .

From this point following the instructions as to the hijackthis forum will help confirm that you are malware free .

Hijackthis will give a detailed report of all the changes that have been made to windows . The hijackthis experts will decipher what is benign and what is malware related and from there give instructions to remove any residual problems .

An initial cleanup followed up by a hijackthis followup scan is the most efficient and thorough way to ensure that your system is malware free .

Back to top
View users profile Send private message Send email
Mere_Mortal

1st Responder


Joined: Apr 10, 2004
Posts: 4191
Location: Kidderminster
1st Responders Rootkit Responders

PostPosted: Wed Aug 02, 2006 1:26 am    Post subject:
Reply with quote

Anonymous wrote:
So what you guys tell me all things that are bad that showed up on my log and then give me instructions afterwards.

Well, we just tell you how to be rid of it all straight off Wink


_________________
[Malware Removal and Prevention] [Malware Complaints]
Back to top
View users profile Send private message Visit posters website
Casual Question

Guest
IP: 71.251.*.*






PostPosted: Wed Aug 02, 2006 3:09 am    Post subject:
Reply with quote

nosirrah wrote:
You are infected .

Quote:
Btw like i said before i tried to delete ssk.exe but whenever i try it says access is denied it's in use, allthough it's not in use according to my task manager.


Malware does not play by the rules . If you want to get this stuff out of your machine then following our suggestions will do just that . If you don't mind your passwords being stolen along with other personal information then just leave that stuff there .

The log file will tell what exactly you have and we will in turn tell you exactly how to kill it .


Ya im not a fan of malware at all its just that i feel like im not being told enough about this logfile. Im guessing the logfile is just an overview of various crap on my computer that i show you guys and then you guys reply back and tell me which of these things are bad in addition to the ones i uploaded and you have already told me are bad and then tell me how to dispose of them. Now then i have one more action of the MRP to do so ill finish that action and then load my file.

Thank you

Back to top
IP: 71.251.*.*

Guest






PostPosted: Wed Aug 02, 2006 3:10 am    Post subject:
Reply with quote

Casual Question wrote:
nosirrah wrote:
You are infected .

Quote:
Btw like i said before i tried to delete ssk.exe but whenever i try it says access is denied it's in use, allthough it's not in use according to my task manager.


Malware does not play by the rules . If you want to get this stuff out of your machine then following our suggestions will do just that . If you don't mind your passwords being stolen along with other personal information then just leave that stuff there .

The log file will tell what exactly you have and we will in turn tell you exactly how to kill it .


Ya im not a fan of malware at all its just that i feel like im not being told enough about this logfile. Im guessing the logfile is just an overview of various crap on my computer that i show you guys and then you guys reply back and tell me which of these things are bad in addition to the ones i uploaded and you have already told me are bad and then tell me how to dispose of them. Now then i have one more action of the MRP to do so ill finish that action and then load my file.

Thank you


o whoops ignore this please

Back to top
Mere_Mortal

1st Responder


Joined: Apr 10, 2004
Posts: 4191
Location: Kidderminster
1st Responders Rootkit Responders

PostPosted: Wed Aug 02, 2006 4:40 am    Post subject:
Reply with quote

This is the best and most common guide you will find regarding HJT...

http://www.spywareinfo.com/~merijn/htlogtutorial.html

It covers everything that is shown by a scan and exposes the most common symptoms of malware. It is also the the most important aspect of malware removal, it is the first thing any responder will use for diagnostics. Usually, if it shows no signs of trouble, the system is clean, but that cannot be taken for granted because HJT doesn't expose everything.

The MRP and anything else you've done to clean the system may already be enough, thus a HJT log may only be confirmation of such. Or it may reveal left-overs or even issues that were not already realised.

Regards,
M_M


_________________
[Malware Removal and Prevention] [Malware Complaints]
Back to top
View users profile Send private message Visit posters website
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Unknown Files All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer