PPRuNe Forums - View Single Post - Yet another (irremovable) trojan
View Single Post
Old 26th Sep 2005, 13:19
  #3 (permalink)  
Spinflight
 
Join Date: Jul 2005
Location: Lv426
Posts: 82
Likes: 0
Received 0 Likes on 0 Posts
Groundgripper,

Go to your winX/System32 directory and list detailed files. Click the modified tab to see which files have been created or modified recently.

Any files which have been modified or created in the last couple of months should be tested through this website.

Also test these files...

C : \WINDOWS\SOUNDMAN.EXE
C : \WINDOWS\System32\gsicon.exe
C : \WINDOWS\System32\dslagent.exe
C : \PROGRA~1\BTBROA~2\SMARTB~1\BTHelpNotifier.exe
C : \Program Files\Messenger\msmsgs.exe
C : \WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [GSICONEXE] gsicon.exe
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB

It appears that you are running hjt from a temporary directory. Re-install the latest version to a normal directory and repaste the hjt log if Jotti's dosn't clear the problem up.

It also looks as though you are running two AV programs, AVG and McAfee. These can conflict with each other, I'd go for AVG myself and use the McAfee online virus checker as backup as you appear to have broadband.
Spinflight is offline