Welcome to the BleepingComputer HijackThis Logs and Analysis forum toddhd You have at least one Backdoor Trojan on your pc.
A Backdoor is a software program that gives an attacker unauthorized access to a machine and the means for remotely controlling the machine without the user's knowledge. A Backdoor compromises system integrity by making changes to the system that allow it to by used by the attacker for malicious purposes unknown to the user.
They are typically installed without user interaction through security exploits, and may allow an attacker to remotely control the infected machine. Such risks may allow the attacker to install additional malware and use the compromised machine to participate in denial of service attacks, spamming, and bot nets, or to transmit sensitive data to a remote server. The malware may be cloaked and not visible to the user. These risks severely compromise the system by lowering security settings, installing 'backdoors,' infecting system files, or spreading to other networked machines.
If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums. You should consider them to be compromised.
They should be changed by using a different computer and not the infected one,if not an attacker may get the new passwords and transaction information. Banking and credit card institutions should be notified of the possible security breech.
from the link below:http://swandog46.geekstogo.com/avenger.zip
Unzip/extract it to your desktop.
Start up Avenger.
Check the 'Input script manually' option.
Click the Magnifying Glass icon.
In the box that opens,copy and paste ALL
the following bold blue text in the Quote box below:
Files to delete:
C:\Program Files\Common Files\System\spoolmre.exe
C:\Program Files\Common Files\System\mscpl.exe
Then click on 'Done'.
Click the Traffic Light icon to start the program.
Then press OK at the prompts to reboot your PC.
Post the Avenger output.txt, which you can find at C:\Avenger\.txt into your next reply.
Run the F-Secure online virus/spyware scan
using Internet Explorer
Follow the directions in the F-Secure page for proper Installation.
Accept the License Agreement.
Once the ActiveX installs,Click ‘Custom Scan’ and be sure the following are checked:1.Scan whole System 2.Scan all files 3.Scan whole system for rootkits 4.Scan whole system for spyware 5.Scan inside archives 6.Use advanced heuristics
Once the download completes,the scan will begin automatically.
The scan will take some time to finish,so please be patient.
When the scan completes, click the ‘I want to decide item by item’
For each item found,Select ‘Disinfect’
and click ‘Next’.
Click the ‘Show Report’
button,then copy and paste the entire report into your next reply.Also post a new Hijackthis log please.