Hangman101

Hey thanks Maniac! I had a go with HJT myself and tried to "fix" these entries in safe mode. Sure enough, next scan didn't have these entries and after those files (spoolsv.exe and lsm.exe) were deleted, I haven't seen them pop up again! I'd still like to know what I was infected with and more importantly, whether it was possible to resolve it using just MBAM and without HJT's help (messing with the registry always makes me paranoid. But these entries seemed to be the culprit) Anyway, since you asked, I've followed your instructions and these are my logs (taken AFTER doing the above fix) MBAM log: DDS.log Attach.txt

Hi everyone! Running Win7 Ultimate x64 with Avast 6 and MBAM 1.50.1 and HiJackThis 2.0.4 I noticed a rather odd "8306.exe has stopped working" message the other day and did a quick scan using Avast to find some kinda malware hidden in startup. I immediately booted up safe mode and did a Full avast scan (another dll found) and a Full MBAM scan (with heuristics - lots of stuff found) But there's still this spoolsv.exe in my Users/Me/AppData/Roaming/ folder as well as an lsm.exe in a spoolsv folder in the same path. Subsequent scas using both Avast and MBAM gave clean results but I still see them running And after a few more boots I decided to scan again just to make sure. Avast gave me a green but MBAM said much was going on (log attached) Please help me get rid of em once and for all! HiJackThis log: MBAM log: Thanks for any help!