Avast Products > Avast Free Antivirus / Pro Antivirus / Internet Security/ Premier
HijackThis Log: Please help diagnose
<< < (7/8) > >>
oldman:
452 is the newest, 451 comes in either zipped or unzipped. They both do the same.

I PMed you my address, if you could mail me that file I had you make, I'll have a look and see what it's all about.
oldman:
Hi bobbydee

Everything going ok?

You have a couple of files to delete.

C:\system.bat
C:\info.exe

Then empty your recycle bin.
bobbydee:
System Report Txt
oldman:
Hi, thanks that's an old one. thanks for continuing this in the forum. Others may benifit from what we find. I just didnt want the contents of system.bat post in case they where really malicious.

you can delete get.bat, the look.txt it created on your desktop and any logs, other notepads that where created during the cleaning of your computer. I forgot to mention that earlier.

We'll use a tool to get those files.

Please download
 OTMoveIt2 by OldTimer.

Save it to your desktop.

Please double-click OTMoveIt2.exe to run it.


Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):


C:\system.bat
C:\info.exe



Return to OTMoveIt2, right click in the "Paste List of Files/Folders to be Moved" window (under the light blue bar) and choose Paste.



Click the red Moveit! button.

Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.

Close OTMoveIt2

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

NOTE: If OTMOVEITE reboots, before you can get the ruslts they can be found here
 C:\_OTMoveIt\MovedFiles\********_******.log
(where "********_******" is the "date_time")





bobbydee:
C:\system.bat moved successfully.
C:\info.exe moved successfully.

BTW Spybot is constantly giving me a message that reads:
Category: Sessions Manager
Change: Value Changed
 
Entry: Boot Execute

Old data: autocheck autochk *\aswBoot.exe\A:"*"/L:
New data: autocheck autochk \*

Allow change                             Deny change

Anyone know anything about this?

Navigation
Message Index
Next page
Previous page

Go to full version