It is currently Tue Oct 20, 2026 10:54 pm


Wierd things agoin on

Is your PC infected? Is it running slow? Just can't figure out what's making it sluggish? Here is the place to get some help.

Moderators: liljim, Gecko

Postby D_N_M » Wed Apr 11, 2007 4:11 am

Here it is Gecko. only the (nulls*) ever showed up before the other 3 ?????
maybe we found the problem? I sure hope so. here is the log and again Thank you for your help,Patience and expertise.

HKLM\SECURITY\Policy\Secrets\SAC* 3/29/2006 2:14 AM 0 bytes Key name contains embedded nulls (*)
HKLM\SECURITY\Policy\Secrets\SAI* 3/29/2006 2:14 AM 0 bytes Key name contains embedded nulls (*)
HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed 4/10/2007 11:01 PM 80 bytes Data mismatch between Windows API and raw hive data.
C:\Documents and Settings\Matthew\Local Settings\Temp\_core_\ppinfo.dat.630.2.ppu 4/10/2007 11:03 PM 1.04 MB Hidden from Windows API.
C:\Documents and Settings\Matthew\Local Settings\Temp\_core_\pploc.dat.630.2.ppu 4/10/2007 11:03 PM 645.96 KB Hidden from Windows API.
D_N_M
Geek
Geek
 
Posts: 44
Joined: Sun Apr 08, 2007 6:09 pm
Location: U.S.A

Thanks given:0
Thanks received:0
Top

Postby Gecko » Wed Apr 11, 2007 1:40 pm

D_N_M,

HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed:
That is the Firefox Cryptograph plug in

C:\Documents and Settings\Matthew\Local Settings\Temp\_core_\ppinfo.dat.630.2.ppu
C:\Documents and Settings\Matthew\Local Settings\Temp\_core_\pploc.dat.630.2.ppu

I think these are just anti virus definition files but lets get rid of them just in case.

Warning! These instruction are for this thread only!
You should never attempt to use them for anything else!



Please download to your desktop.

Click killbox.exe, now select the option "Delete on reboot".
Now click on the "All files" button (it will turn green)

Next copy the below red part:

C:\Documents and Settings\Matthew\Local Settings\Temp\_core_\ppinfo.dat.630.2.ppu
C:\Documents and Settings\Matthew\Local Settings\Temp\_core_\pploc.dat.630.2.ppu


Click 'File' in the killbox Menu on top and choose Paste from clipboard
Now click the red X icon to delete these files on reboot
Killbox will tell you that all listed files will be removed on next reboot and asks if you would like to Reboot now, click YES

If you don't get that message, reboot manually.

Once your system has rebooted post a new HiJackThis log when you reply.
User avatar
Gecko
Super Moderator
Super Moderator
 
Posts: 5209
Joined: Thu Oct 25, 2001 1:00 am
Location: Florida, USA

Thanks given:1
Thanks received:23
Top

Postby D_N_M » Wed Apr 11, 2007 4:00 pm

It won't let Me get to there site I've tried Firefox and IE and this is what I get
Not Found
The requested document was not found on this server.
Web Server at killbox.net. whatever is still stopping Me from anything to do with security sites. This is truely crazy. I found the file where these are and deleted them.
D_N_M
Geek
Geek
 
Posts: 44
Joined: Sun Apr 08, 2007 6:09 pm
Location: U.S.A

Thanks given:0
Thanks received:0
Top

Postby Gecko » Wed Apr 11, 2007 7:09 pm

D_N_M,

If you could just delete those files then they were not bad.
I checked that link and I'm sorry but it is bad, the owner moved things around recently.

Try turning off your firewall and see what happens.

Also are you behind a router?
User avatar
Gecko
Super Moderator
Super Moderator
 
Posts: 5209
Joined: Thu Oct 25, 2001 1:00 am
Location: Florida, USA

Thanks given:1
Thanks received:23
Top

Postby D_N_M » Wed Apr 11, 2007 7:36 pm

Yes I am behind a Linksys 4 port switch router wired not wireless
D_N_M
Geek
Geek
 
Posts: 44
Joined: Sun Apr 08, 2007 6:09 pm
Location: U.S.A

Thanks given:0
Thanks received:0
Top

Postby D_N_M » Wed Apr 11, 2007 8:37 pm

I turned off the firewall and was able to hit different links and sites you suggested and it went through so I went through the firewall and some things were off that were supposed to be on but were off and vice versa.
So I guess it's safe to say that this has been resolved.
Gecko I want to thank you sincerely for your time patience and wisdom.
If ever I need further help or know anyone that does I will certainly point them in this direction.
Thanks again
D_N_M
Geek
Geek
 
Posts: 44
Joined: Sun Apr 08, 2007 6:09 pm
Location: U.S.A

Thanks given:0
Thanks received:0
Top

Postby D_N_M » Wed Apr 11, 2007 11:16 pm

One last thing Gecko

How would one go about a donation to the site to ensure it's existence??
D_N_M
Geek
Geek
 
Posts: 44
Joined: Sun Apr 08, 2007 6:09 pm
Location: U.S.A

Thanks given:0
Thanks received:0
Top

Postby Gecko » Thu Apr 12, 2007 12:06 pm

D_N_M,

Thank you for your kind words and for wanting to donate.

This site currently has no gateway for donations but rest assured that it is not going anywhere.
It has been in existence almost six years now and the owner is committed to keeping this site going.
User avatar
Gecko
Super Moderator
Super Moderator
 
Posts: 5209
Joined: Thu Oct 25, 2001 1:00 am
Location: Florida, USA

Thanks given:1
Thanks received:23
Top

Previous

Return to Malware Support

Who is online

Users browsing this forum: No registered users and 0 guests

cron