PDA

View Full Version : What do we do if we have a spyware problem


Guest110
11-21-2006, 01:57 PM
Is there anyone in KH to read these hijack logs or do you have a different approach to spyware?????
Who do i call?????

Tortanick
11-21-2006, 03:21 PM
Seth and Mylanta know a thing or two about fixing after spyware :)

and have you considered one of the many secure OSs avalible?

Guest110
11-21-2006, 03:26 PM
Seth and Mylanta know a thing or two about fixing after spyware :)

and have you considered one of the many secure OSs avalible?

Whats that supposed to mean MRT.:D . is there such a system ????:clock:

Tortanick
11-21-2006, 04:23 PM
Linux and the BSDs for one :)

Guest110
11-22-2006, 03:19 AM
Linux and the BSDs for one :)

Thats all greek to me:D

mylanta
11-22-2006, 08:34 AM
Well we really don't have any sophisticated training for that BM, but there are those of us who can read them and suggest courses of action as Tortanick suggested.
Actually I am not so quick to ask for those logs anyway as I use them as a last resort and prefer running online scanners first. In most cases where you actually need hjt, you wind up reformatting anyway because the "cures" cause too much damage usually.

Guest110
11-22-2006, 08:35 AM
So online scans... and if still have problems just a note in the virus forum

I havent really got a problem just a file in a hijack log im curious about

Seth
11-22-2006, 09:07 AM
BM,

Upload the file to here (http://www.virustotal.com/en/indexf.html). It will be scanned by antivirus scanners.

Guest110
11-22-2006, 09:13 AM
i cant seem to locate the file Seth its a 23 entry on the HJ log and i was curious
Its not a file but a service O23 - Service: MorningSound VirtualCamera Play Service (VirtualCameraService) - Unknown owner - C:\Program Files\VirtualCamera\VCamSrv.exe (file missing)

Seth
11-22-2006, 09:18 AM
So you installed Virtual Camera then uninstalled it right?

If so, go ahead and remove the service.

Guest110
11-22-2006, 09:20 AM
So you installed Virtual Camera then uninstalled it right?

If so, go ahead and remove the service.

I cant remember Seth LOL ... i like to keep an eye on whats running.. Thanks its on its way out

Seth
11-22-2006, 09:26 AM
That removed file: C:\Program Files\VirtualCamera\VCamSrv.exe (file missing), is being called upon by the registry. Since it's a startup service, HijackThis lists it.

Guest110
11-22-2006, 09:28 AM
so it was nothing nasty really...Thanks for the sdvice

Pi rules
11-23-2006, 09:31 AM
As Tortanick mentioned, Seth and mylanta (probably a few others) remove malware all of the time. I took specific malware training on a large forum to read HijackThis logs and remove malware, but I had to stop half way through the "upper class" because I had too much homework. I can read them and see what is wrong, but people like Seth and mylanta would be better and helping you remove what's there.

O23 - Service: MorningSound VirtualCamera Play Service (VirtualCameraService) - Unknown owner - C:\Program Files\VirtualCamera\VCamSrv.exe (file missing)
That file is missing, so the service does nothing anyway. I would remove it.