the dreaded mstorr.exe

View previous topic View next topic Go down

the dreaded mstorr.exe

Post by zulsori on 10th January 2010, 2:28 am

Hi,
I have searched your forums about mstorr.exe and have tried everything that has been posted, but it hasn't quite worked for me.

I tried using malwarebytes's file assasin on the mstorr.exe file but the leechLLC file isn't anywhere to be seen where it said it is. i've also tried "jumping to location" after finding it in malwarebytes and deleting it manually but that hasn't worked.

Here is my hijackthis log:

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
D:\Program Files\Bonjour\mDNSResponder.exe
D:\Program Files\Microsoft LifeCam\MSCamS32.exe
D:\Program Files\CyberLink\Shared files\RichVideo.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\WINDOWS\system32\wscntfy.exe
D:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
D:\Documents and Settings\Owner\Desktop\HiJackThis.exe

F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe,D:\Program Files\LeechLLC:mstorr.exe,
O4 - HKLM\..\Run: [nvcpl] D:\Program Files\LeechLLC:mstorr.exe
O23 - Service: Apple Mobile Device - Apple Inc. - D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - D:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe




Please help! its killing me and my internet slowly Sad tearing

zulsori
Novice
Novice

Posts Posts : 10
Joined Joined : 2010-01-09
OS OS : windows xp
Points Points : 25337
# Likes # Likes : 0

View user profile

Back to top Go down

Re: the dreaded mstorr.exe

Post by Belahzur on 10th January 2010, 2:31 am

Hello.
You cut the log header off, I need a full log please.

Please download the current version of HijackThis from [You must be registered and logged in to see this link.]

  • Double click and run the installer.
  • It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  • After installing, you should get the user agreement, press accept and Hijack This will run.
  • Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: the dreaded mstorr.exe

Post by zulsori on 10th January 2010, 3:33 am

Logfile of Trend Micro HijackThis v2.0.3 (BETA)
Scan saved at 1:29:02 PM, on 1/10/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
D:\Program Files\Bonjour\mDNSResponder.exe
D:\Program Files\Microsoft LifeCam\MSCamS32.exe
D:\Program Files\CyberLink\Shared files\RichVideo.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\WINDOWS\system32\wscntfy.exe
D:\WINDOWS\System32\msiexec.exe
D:\Program Files\TrendMicro\HiJackThis\HiJackThis.exe

F2 - REG:system.ini: UserInit=D:\WINDOWS\system32\userinit.exe,D:\Program Files\LeechLLC:mstorr.exe,
O4 - HKLM\..\Run: [nvcpl] D:\Program Files\LeechLLC:mstorr.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\System32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - D:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - D:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

--
End of file - 1836 bytes

zulsori
Novice
Novice

Posts Posts : 10
Joined Joined : 2010-01-09
OS OS : windows xp
Points Points : 25337
# Likes # Likes : 0

View user profile

Back to top Go down

Re: the dreaded mstorr.exe

Post by zulsori on 10th January 2010, 3:52 am

After looking at that i think i've fixed my problem.

I used malwarebytes fileASSASIN to delete userinit.exe and lsass.exe and my problem seems to be solved. Thanks for the help anyway. =)

zulsori
Novice
Novice

Posts Posts : 10
Joined Joined : 2010-01-09
OS OS : windows xp
Points Points : 25337
# Likes # Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum