Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest
Possible Virus?
-
16-02-2008 4:22am#1Hey guys,
For the past week or so my PC has become very unstable, it's very slow, constantly crashing, freezing etc..
I'm running XP, and I have AVG and Zone Alarm, both are up-to-date and whenever I run scans with either of these nothing shows up.
A few days ago my password to my account on XP miraculously changed itself and I was locked out of my PC til some fellow friendly boardsies soon sorted me out, and I was wondering if this could have been due to some piece of malicious software?
A few times when my pc has crashed I'll press CTRL + ALT + DEL and when I do it will show the task manager showing up something crazy like 70 of them running simultaneously. Again, this says virus to me.
On seeing a recommendation from someone here on this forum I downloaded SUPERAntiSpyware and it's still running. So far it has unearthed 25 Adware Tracking Cookies.
Also in reading through this forum I noticed Deckards SS being mentioned a few times, so again I downloaded this and ran it a while ago.
would anyone be kind enough as to run through the logs I got after it had finished and give me their opinion please?
thanks guys!
0
Comments
-
-
Deckard's System Scanner v20071014.68
Extra logfile - please post this as an attachment with your post.
-- System Information
Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: English
CPU 0: AMD Athlon(tm) 64 Processor 3400+
Percentage of Memory in Use: 80%
Physical Memory (total/avail): 511.48 MiB / 99.98 MiB
Pagefile Memory (total/avail): 1672.84 MiB / 1100.3 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1933.6 MiB
A: is Removable (No Media)
C: is Fixed (NTFS) - 149.05 GiB total, 6.5 GiB free.
is Fixed (NTFS) - 149.04 GiB total, 134.99 GiB free.
E: is CDROM (No Media)
F: is CDROM (No Media)
G: is Removable (No Media)
H: is Removable (No Media)
I: is Removable (No Media)
J: is Removable (No Media)
\\.\PHYSICALDRIVE0 - ST3160021A - 149.05 GiB - 1 partition
\PARTITION0 (bootable) - Installable File System - 149.05 GiB - C:
\\.\PHYSICALDRIVE1 - ST3160021A - 149.05 GiB - 1 partition
\PARTITION0 - Extended w/Extended Int 13 - 149.04 GiB -
\\.\PHYSICALDRIVE4 - Medion Flash XL MMC/SD USB Device
\\.\PHYSICALDRIVE2 - Medion Flash XL CF USB Device
\\.\PHYSICALDRIVE3 - Medion Flash XL MS USB Device
\\.\PHYSICALDRIVE5 - Medion Flash XL SM USB Device
-- Security Center
AUOptions is scheduled to auto-install.
Windows Internal Firewall is disabled.
FW: ZoneAlarm Security Suite Firewall v7.0.462.000 (Check Point, LTD.)
AV: ZoneAlarm Security Suite Antivirus v7.0.462.000 (Check Point, LTD.)
AV: AVG 7.5.516 v7.5.516 (Grisoft)
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
[HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\uTorrent\\uTorrent.exe"="C:\\Program Files\\uTorrent\\uTorrent.exe:*:Enabled:µTorrent"
"C:\\Program Files\\Kontiki\\KService.exe"="C:\\Program Files\\Kontiki\\KService.exe:*:Enabled:Delivery Manager Service"
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox"
"C:\\Program Files\\Real\\RealPlayer\\realplay.exe"="C:\\Program Files\\Real\\RealPlayer\\realplay.exe:*:Enabled:RealPlayer"
"C:\\Program Files\\Grisoft\\AVG7\\avginet.exe"="C:\\Program Files\\Grisoft\\AVG7\\avginet.exe:*:Enabled:avginet.exe"
"C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgamsvr.exe:*:Enabled:avgamsvr.exe"
"C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgcc.exe:*:Enabled:avgcc.exe"
"C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe"="C:\\Program Files\\Grisoft\\AVG7\\avgemc.exe:*:Enabled:avgemc.exe"
-- Environment Variables
ALLUSERSPROFILE=C:\Documents and Settings\All Users
APPDATA=C:\Documents and Settings\Morbid Angel\Application Data
CLASSPATH=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
CLIENTNAME=Console
CommonProgramFiles=C:\Program Files\Common Files
COMPUTERNAME=MORBID-ANGEL
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Documents and Settings\Morbid Angel
LOGONSERVER=\\MORBID-ANGEL
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\Program Files\Mozilla Firefox;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\QuickTime\QTSystem\
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 8, AuthenticAMD
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0408
ProgramFiles=C:\Program Files
PROMPT=$P$G
QTJAVA=C:\Program Files\QuickTime\QTSystem\QTJava.zip
RNLOG_BASEKEY=Software\RealNetworks\RealPlayer\6.0\Preferences\BrowserRecordPluginLog
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOCUME~1\MORBID~1\LOCALS~1\Temp
TMP=C:\DOCUME~1\MORBID~1\LOCALS~1\Temp
tvdumpflags=8
USERDOMAIN=MORBID-ANGEL
USERNAME=Morbid Angel
USERPROFILE=C:\Documents and Settings\Morbid Angel
windir=C:\WINDOWS
-- User Profiles
Morbid Angel (admin)
Administrator (new local, admin)
-- Add/Remove Programs
--> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> C:\Program Files\FriendBot\FriendBot\uninstall.exe
µTorrent --> "C:\Program Files\uTorrent\uTorrent.exe" /UNINSTALL
AVG 7.5 --> C:\Program Files\Grisoft\AVG7\setup.exe /UNINSTALL
BulkFriendAdder --> MsiExec.exe /X{338B9994-DA2E-4351-94C3-9FBE3378698A}
FriendBlasterPro --> "C:\Program Files\FriendBlasterPro\unins000.exe"
Hotspot Shield 0.941 --> C:\Program Files\Hotspot Shield\Uninstall.exe
Java(TM) 6 Update 3 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160030}
Microsoft Office Professional Edition 2003 --> MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
Mozilla Firefox (2.0.0.12) --> C:\Program Files\Mozilla Firefox\uninstall\helper.exe
RealPlayer --> C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Rhapsody Player Engine --> MsiExec.exe /I{22DE1881-9D24-4981-B5CC-EC7E9F2F4D52}
ZoneAlarm --> C:\Program Files\Zone Labs\ZoneAlarm\zauninst.exe
-- Application Event Log
Event Record #/Type2811 / Error
Event Submitted/Written: 02/16/2008 02:21:24 AM
Event ID/Source: 1002 / Application Hang
Event Description:
Hanging application FriendBlasterPro.exe, version 9.1.0.0, hang module hungapp, version 0.0.0.0, hang address 0x00000000.
Event Record #/Type2810 / Error
Event Submitted/Written: 02/15/2008 09:10:33 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application KService.exe, version 5.11.704.230, faulting module KService.exe, version 5.11.704.230, fault address 0x00211e5a.
Processing media-specific event for [KService.exe!ws!]
Event Record #/Type2803 / Error
Event Submitted/Written: 02/15/2008 05:43:13 PM
Event ID/Source: 1001 / Application Error
Event Description:
Fault bucket 479121704.
The Wep key exchange did not result in a secure connection setup after 802.1x authentication. The current setting has been marked as failed and the Wireless connection will be disconnected.
Event Record #/Type2802 / Error
Event Submitted/Written: 02/15/2008 05:43:06 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application KService.exe, version 5.11.704.230, faulting module KService.exe, version 5.11.704.230, fault address 0x00211e5a.
Processing media-specific event for [KService.exe!ws!]
Event Record #/Type2783 / Error
Event Submitted/Written: 02/14/2008 11:39:19 PM
Event ID/Source: 1000 / Application Error
Event Description:
Faulting application KService.exe, version 5.11.704.230, faulting module KService.exe, version 5.11.704.230, fault address 0x00211e5a.
Processing media-specific event for [KService.exe!ws!]
-- Security Event Log
No Errors/Warnings found.
-- System Event Log
Event Record #/Type13394 / Warning
Event Submitted/Written: 02/16/2008 01:16:32 AM
Event ID/Source: 4226 / Tcpip
Event Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
Event Record #/Type13393 / Warning
Event Submitted/Written: 02/15/2008 11:48:41 PM
Event ID/Source: 4226 / Tcpip
Event Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
Event Record #/Type13390 / Warning
Event Submitted/Written: 02/15/2008 09:27:09 PM
Event ID/Source: 4226 / Tcpip
Event Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
Event Record #/Type13389 / Error
Event Submitted/Written: 02/15/2008 09:10:43 PM
Event ID/Source: 7034 / Service Control Manager
Event Description:
The KService service terminated unexpectedly. It has done this 1 time(s).
Event Record #/Type13388 / Warning
Event Submitted/Written: 02/15/2008 09:08:32 PM
Event ID/Source: 4226 / Tcpip
Event Description:
TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts.
-- End of Deckard's System Scanner: finished at 2008-02-16 03:21:04
0 -
Advertisement