Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

what do I do? HKU\ and sites I don't recognize


  • Please log in to reply
1 reply to this topic

#1 freakingoutbigtime

freakingoutbigtime

  • Members
  • 26 posts
  • OFFLINE
  •  
  • Local time:09:49 PM

Posted 09 June 2009 - 02:01 AM

I've posted this on a couple of forums and I haven't gotten a reply yet. Dying for an answer so I thought I'd go to another board.

Hi,
I'm the one that freaked out a few days ago about some stuff wrong with my computer. I thought I had everything taken care of after I chatted on the board. I've been running my McAfee Virus scanner and something caught my eye the past few days. The computer's behavior has been okay. Nothing seems to be wrong with it (now anyway) so I'm not sure what any of this means. Anyway, I've spotted the scanner scanning a few websites. Websites that I've never been to before. Websites that I'd never even go to. The start of each one (from what I've noticed starts with HKU) and it'll show up something about Domains and then it'll have a link to porn sites and other various sites. I'll flat out say that I don't look at porn on the internet. I never have. Never will. I'm not looking down my nose at the ones that look at porn. It's cool if ya do. I just don't. So where is this stuff coming from? I'll post a few screencaps of the virus scanner and what it shows when it scans those sites. All of this shows up within the 96% mark. Notice how when it gets to the last few percentages the pause and skip buttons grey out and can't be clicked. Is that normal?

I've been scanning other things and no viruses or anything's showing up on there. All that includes Ad-Aware, SpyBot Search and Destroy, etc. Basically it's all the stuff I downloaded in a frenzy from a few days ago.


Thank you for your time and for any replies. I appreciate it.



http://img248.imageshack.us/img248/5808/wtf1.jpg
http://img244.imageshack.us/img244/8546/wtf2f.jpg
http://img268.imageshack.us/img268/5541/wtf3m.jpg
Reply With Quote

Other message for older problems located at: http://forums.mcafeehelp.com/showthread.ph...5002#post565002 ---all of that relates to a problem I had with twext.exe. Thankfully that's no longer showing up. I have Windows XP btw.

Edited by freakingoutbigtime, 09 June 2009 - 02:02 AM.


BC AdBot (Login to Remove)

 


#2 Elise

Elise

    Bleepin' Blonde


  • Malware Study Hall Admin
  • 60,833 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Romania
  • Local time:04:49 AM

Posted 09 June 2009 - 02:20 PM

Hello freakingoutbigtime,

:thumbsup: to BleepingComputer! Lets see if we can figure out whats wrong with your computer.

ATF-CLEANER
------------------
Please download ATF Cleaner by Atribune. (This program is for XP and Windows 2000 only)Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.
If you use Firefox browserClick Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browserClick Opera at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.


MALWAREBYTES ANTIMALWARE
-------------------------------------------
Please download Malwarebytes Anti-Malware and save it to your desktop.
alternate download link 1
alternate download link 2

MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Full Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  • Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

regards, Elise


"Now faith is the substance of things hoped for, the evidence of things not seen."

 

Follow BleepingComputer on: Facebook | Twitter | Google+ | lockerdome

 

Malware analyst @ Emsisoft





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users