Hjt log

[jornsen]

Hi PP

-->Ran fixit.reg - OK
No trace of ConnectionServices and LinkOptimizer in Add/Remove...

--------
Found gmer at http://www.majorgeeks.com/GMER_d5198.html - also fond some discussions about what gmer could do at spywarefri.dk, so I scanned ONLY and wait for your instructions... :-)
--> Rootkit tab, left all checked - ran scan - Log attached.

-------
-->Ran HJT "Ads Spy" - unchecked "Quick scan" and ran scan. Log attached.

--------
-->Generated Fresh HJT log - attached

--------
(Denmark just - 1 min ago - went to the 2nd 2*5 mins rematch against Poland in the fight for qualfication to the finals for mens handball WC - a BIG issue in Denmark - my wife and son are doing their best to tilt our house...

/John

[PhilliePhan]

Hi John,

The logs look OK. I think you are good to go!

Fix these with HJT:
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O20 - AppInit_DLLs:

Make sure the file is indeed missing before fixing this one
O23 - Service: VNC Server (winvnc) - Unknown owner - C:\Program Files\ORL\VNC\WinVNC.exe (file missing)


-- You should definitely Update your Java here ---> http://www.java.com/en
-- Then, look in Add/Remove Programs and Remove ALL traces of any older Java versions! If you do not uninstall ALL older versions, you may remain at risk for a number of baddies such as Vundo.

Let me know if you are still experiencing any problems.

Cheers
PP

[jornsen]

Hi PP

I downloaded a new java and deleted my old one..

As for the HJT fixes, I experienced an error (#5) in HJT during fix. I got the three first fixed but not the last - HJT cannot fix it (keeps reappearing).

I reported the incident to merijn, and I'll wait for an answer (knowing that I might never get any - sound like a busy man/woman) before I do anything - I know approx what the VNC is, the file is gone and so....

Thanks a million for your help - all 3 of you. I am impressed with your knowledge and the fact that you use your time helping out amateurs like me...

Best regards
/John

[PhilliePhan]

Hi John,

We are happy to help I enjoy the challenge!
Gives us something to do with our free time. It's a bit sad that we do not get much traffic here while threads in other forums often go unanswered.....

-- We can remove that O23 - Service: VNC Server (winvnc) - Unknown owner - C:\Program Files\ORL\VNC\WinVNC.exe (file missing) manually.
I am not particularly worried about it, since you know what it is and you installed it in the first place....

If you like, this will remove it.

FIRST:
Click Start > Run > type services.msc and Click OK
Locate VNC Server (winvnc) and RightClick on it to bring up the Service Properties Window.
First: Stop the service by clicking the Stop Button.
Next: Disable it by changing the Startup Type to Disabled and click Apply.

NEXT:
Run HijackThis and open the Misc Tools section and select Delete an NT service and follow the instructions to enter and remove that entry.

Reboot

That ought to do the trick!

Cheers
PP

[jornsen]

Hi PP
¨
....and gone, it is!!

Again, thanks for your help!!!

Best regards

/John

[PhilliePhan]

Hi PP
¨
....and gone, it is!!

Again, thanks for your help!!!

Best regards

/John

You're Welcome!