Running: Gmer.exe Driver: C:\Users\Owner\AppData\Local\Temp\uwlcapow.sysĭisk \Device\Harddisk0\DR0 code has been found *.local Windows Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 TOSHIBA_MK2035GSS rev.DK020M HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command| (Hijack.StartMenuInternet) -> Bad: ("C:\Windows\system32\config\systemprofile\AppData\Local\pdj.exe" -a "C:\Program Files\Internet Explorer\iexplore.exe") Good: (iexplore.exe) -> Quarantined and repaired successfully.Ĭ:\Windows\System32\config\systemprofile\AppData\Local\pdj.exe () -> Delete on reboot. HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command| (Hijack.StartMenuInternet) -> Bad: ("C:\Windows\system32\config\systemprofile\AppData\Local\pdj.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe" -safe-mode) Good: (firefox.exe -safe-mode) -> Quarantined and repaired successfully. HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command| (Hijack.StartMenuInternet) -> Bad: ("C:\Windows\system32\config\systemprofile\AppData\Local\pdj.exe" -a "C:\Program Files\Mozilla Firefox\firefox.exe") Good: (firefox.exe) -> Quarantined and repaired successfully. HKCR\.exe| (PUM.HijackExefiles) -> Bad: (6f) Good: (exefile) -> Quarantined and repaired successfully. HKCR\.exe\shell\open\command| (Hijack.ExeFile) -> Data: "C:\Windows\system32\config\systemprofile\AppData\Local\pdj.exe" -a "%1" %* -> Delete on reboot. Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUMĬ:\Windows\System32\config\systemprofile\AppData\Local\pdj.exe () -> 3744 -> Delete on reboot. I appreciate any and all assistance and thank you all in advance!
It may not be relevant to the issue, but an additional problem is that program shortcuts and icons no longer function properly: to get a program to run I now have to right-click and select “start” in order to get them moving. At this point both IE and Firefox were subjected to redirection, so I disconnected from the internet and ran the whole process a second time.
Firefox slingplayer plugin safety full version#
This second variant mimicked the windows security center, advising me to “upgrade to a full version of vista security” in order to get rid of supposed trojans. After following Julio's instructions to another user, things were looking pretty good however, upon connecting to the internet to post the logs, another (perhaps related) malware seemed to take root. My laptop has been infected by the “system check” malware described on other threads in this forum.
0 kommentar(er)
