Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Unknown Infection

  • This topic is locked This topic is locked
3 replies to this topic

#1 dmslack


  • Members
  • 119 posts
  • Local time:11:20 PM

Posted 15 June 2008 - 08:21 PM

Recently my computer has been having strange problems that the normal AV/malware programs (Ad-aware, AVG, Symantec, Spybot) haven't been able to pick up. Any newly installed programs fail to run in normal mode (but safe mode is fine) with an error about failing to initialize. We've aqlso noticed a random "kissing" noise coming from the speakers over the past few days. The program errors have been going on longer than that, however.

We've run a HijackThis log that we are attaching, hoping for some assistance! If any additional information is needed, please let me know and I will be glad to provide it.

Attached Files

BC AdBot (Login to Remove)


#2 dmslack

  • Topic Starter

  • Members
  • 119 posts
  • Local time:11:20 PM

Posted 18 June 2008 - 06:33 AM

Here are the results of the Kaspersky online scanner:


Wednesday, June 18, 2008
Operating System: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Kaspersky Online Scanner 7 version:
Program database last update: Wednesday, June 18, 2008 01:46:41
Records in database: 877463

Scan settings
Scan using the following database extended
Scan archives yes
Scan mail databases yes

Scan area My Computer

Scan statistics
Files scanned 177847
Threat name 2
Infected objects 4
Suspicious objects 0
Duration of the scan 04:06:49

File name Threat name Threats count
C:\PROGRA~1\WORDRE~1\WORDRE~1.DLL/C:\PROGRA~1\WORDRE~1\WORDRE~1.DLL Infected: not-a-virus:AdWare.Win32.Mostofate.dy 1

C:\Program Files\SolarWinds\Free Tools\TFTP-Server.exe Infected: not-a-virus:Server-FTP.Win32.Tftp.500 1

C:\Program Files\WordReferenceEnEs\wordreferenceEnEs.dll Infected: not-a-virus:AdWare.Win32.Mostofate.dy 1

C:\TFTP\SolarWinds-TFTP-Server.exe Infected: not-a-virus:Server-FTP.Win32.Tftp.500 1

The selected area was scanned.

#3 Carolyn


    Bleepin' kitten

  • Members
  • 2,131 posts
  • Local time:11:20 PM

Posted 21 June 2008 - 12:53 PM

Hello and Welcome to the forums!

My name is Carolyn and I'll be glad to help you with your computer problems. HijackThis logs can take some time to research, so please be patient with me. I know that you need your computer working as quickly as possible, and I will work hard to help see that it happens.

Please reply to this thread, do not start another.
Please tell me about any problems that have occurred during the fix.
Please tell me of any other symptoms you may be having as these can help also.
Please try as much as possible not to run anything while executing a fix.

As I am still in training, everything that I post to you must be checked by one of the teachers. Thus, there may be a bit of a delay between posts, but it shouldn't be too long.

If you follow these instructions, everything should go smoothly.

I am sorry that we were unable to reply to your post sooner. The forums have been very busy.

If you are still in need of assistance, please scan again with HijackThis and post a fresh log.

Also, please make an uninstall list using HijackThis
To access the Uninstall Manager you would do the following:

1. Start HijackThis
2. Click on the Config button
3. Click on the Misc Tools button
4. Click on the Open Uninstall Manager button.
5. Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here in your next reply.

Post the fresh HijackThis log and the uninstall list in the body of your next reply.
Member of ASAP (Alliance of Security Analysis Professionals)
Posted Image

#4 don77


    Forum Regular

  • Members
  • 3,212 posts
  • Gender:Male
  • Location:Boston Mass
  • Local time:11:20 PM

Posted 27 June 2008 - 10:52 AM

Due to the lack of feedback, this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team
a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users