 Computer's About To Die--spyware..., someone with a lot of experience needed here... |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
BleepingComputer.com > Security > HijackThis Logs and Virus/Trojan/Spyware/Malware Removal > Misplaced HJT Logs  |
 Feb 9 2008, 05:05 PM
Post
#1
|
|
|
New Member  Group: Members Posts: 8 Joined: 9-February 08 Member No.: 189,242  |
it seems that it's coming to the end for this thing. there's definitely a huge amount of viruses and spyware and junk on it. it's a windows xp, sp2, compaq presario sr2010nx. i don't know what other details you need...except for the symptoms i guess. here they are, as i encountered them... -at first, the computer was just running really slow. -aol wouldn't open up. it said something like "low memory" or something, but i was not running anything else at the time. luckily, before this all happened, i had downloaded a win xp startup disc, which took care of the aol problem. but it got a lot worse. -sometimes, the computer just doesn't start. i had to restart it a couple times to get it to startup. -explorer.exe sometimes likes to close and open back up again for no reason. sometimes, it does not open back up, and i have to Run it myself. -on startup, it says "explorer.exe - Bad Image" or something of the sort. -then when it starts up, it says jkkjk.exe not found. -about a week ago, desktop buttons for "uncensored porn" and "bsdm galleries" (probably the same thing) appeared. -just today now, there's taskbar icon things for "windows security alerts", yellow triangles with a ! in it. -POPUPS ALL OVER THE PLACE, again, this just started happening today. that's all i can think of for now. it's very, very hard to even do anything on this computer anymore. i would do a system recovery, but when i do, it comes up a blue screen and says "windows logon process terminated unexpectedly" and then a message. and it sits there, and i have to shut the power completely off and start it up normally. system restore doesn't work either. so if anything, i would like to just do a complete system recovery...if you can get it to work... thanks in advance to anyone that replies. |
 |
 
|
|
Feb 9 2008, 08:20 PM
Post
#2
|
|
 To INSANITY and BEYOND !! Group: Moderator Posts: 10,943 Joined: 10-September 04 From: NJ USA Member No.: 2,608 |
Hello and welcome ,please do this first.
NOTE: all blue wording are links to instructions or tools First you will need to follow the instructions in our Tutorial How to remove the Smitfraud / Generic Zlob Now Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop .. DO NOT run yet. Open SUPER from icon and install and Update it Under Scanner Options make sure the following are checked (leave all others unchecked): Close browsers before scanning. Scan for tracking cookies. Terminate memory threats before quarantining. Click the "Close" button to leave the control center screen and exit the program. DO NOT run yet. Now reboot into Safe Mode: Safe Mode Using the F8 Method Restart your computer. When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu. Select the option for Safe Mode using the arrow keys. Then press enter on your keyboard to boot into Safe Mode. Double-click ATF-Cleaner.exe to run the program. Under Main "Select Files to Delete" choose: Select All. Click the Empty Selected button. If you use Firefox or the Opera browser click on that browser at the top and choose: Select All Click the Empty Selected button. If you would like to keep your saved passwords, please click No at the prompt. Click Exit on the Main menu to close the program. NOW Scan with SUPER Open from the desktop icon or the program Files list On the left, make sure you check C:\Fixed Drive. Perform a Complete scan. After scan,Verify they are all checked. Click OK on the summary screen to quarantine all found items. If asked if you want to reboot, click "Yes" and reboot normally. To retrieve the removal information after reboot, launch SUPERAntispyware again. Click Preferences, then click the Statistics/Logs tab. Under Scanner Logs, double-click SUPERAntiSpyware Scan Log. If there are several logs, click the current dated log and press View log. A text file will open in your default text editor. Please copy and paste the Scan Log results in your next reply. Click Close to exit the program. Please ask any needed questions,post logs and Let us know how your PC in running now. -------------------- Can you spare some PC cycles to help FIND A CURE .. BC FOLDING TEAM Click me /info..
ThoughtVent a goodplace to discuss.<<>>>Staying Updated Calendar of Updates. For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear.... |
|
|
|
|
Feb 10 2008, 08:56 AM
Post
#3
|
|
|
New Member Group: Members Posts: 8 Joined: 9-February 08 Member No.: 189,242 |
well, here's the log. the scan didn't really do much. aol still doesn't start without the startup disc, it's still displaying that "windows has detected spyware infection" with the yellow triangle in the taskbar, still pop ups, the only thing i noticed is that it started up a little quicker.
the log: SUPERAntiSpyware Scan Log http://www.superantispyware.com Generated 02/10/2008 at 08:27 AM Application Version : 3.9.1008 Core Rules Database Version : 3399 Trace Rules Database Version: 1391 Scan type : Complete Scan Total Scan Time : 05:15:37 Memory items scanned : 172 Memory threats detected : 3 Registry items scanned : 7060 Registry threats detected : 36 File items scanned : 143577 File threats detected : 266 Adware.Vundo-Variant/PolyMorph-A C:\WINDOWS\SYSTEM32\DDCCBAA.DLL C:\WINDOWS\SYSTEM32\DDCCBAA.DLL Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\ddccbaa C:\WINDOWS\SYSTEM32\SSQPQRO.DLL Adware.Vundo Variant C:\WINDOWS\SYSTEM32\JKKJK.DLL C:\WINDOWS\SYSTEM32\JKKJK.DLL HKLM\Software\Classes\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A} HKCR\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A} HKCR\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}\InprocServer32 HKCR\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}\InprocServer32#ThreadingModel HKLM\Software\Classes\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF} HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF} HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}\InprocServer32 HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}\InprocServer32#ThreadingModel HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A} HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FA16FE06-B462-470E-9653-79C54B1871FF} HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks#{FA16FE06-B462-470E-9653-79C54B1871FF} HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF} C:\WINDOWS\SYSTEM32\VTUTT.DLL Trojan.Vundo/Variant-Installer/A C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE [HostManager] C:\PROGRAM FILES\COMMON FILES\AOL\1198532047\EE\AOLSOFTWARE.EXE C:\PROGRAM FILES\COMMON FILES\AOL\1198532047\EE\AOLSOFTWARE.EXE [AOLDialer] C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE [SUPERAntiSpyware] C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\MSCONFIG.EXE HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\MSCONFIG.EXE C:\PROGRAM FILES\ACCELERATION SOFTWARE\ANTI-VIRUS\STOPSIGNAV.EXE C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOL .EXE C:\PROGRAM FILES\COMMON FILES\AOL\1198532047\EE\AOLSOFTWARE .EXE C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL .EXE C:\PROGRAM FILES\EACCELERATION\STATION\STATION.EXE C:\PROGRAM FILES\QUICKTIME\QTTASK .EXE C:\PROGRAM FILES\QUICKTIME\QTTASK .EXE C:\PROGRAM FILES\QUICKTIME\QTTASK .EXE C:\PROGRAM FILES\QUICKTIME\QTTASK.EXE C:\WINDOWS\Prefetch\AOLDIAL.EXE-13C23121.pf C:\WINDOWS\Prefetch\AOLSOFTWARE.EXE-103E22F7.pf C:\WINDOWS\Prefetch\SUPERANTISPYWARE.EXE-07994D9B.pf Worm.Rbot Variant [Spoolsv] C:\WINDOWS\SYSTEM32\SPOOLVS.EXE C:\WINDOWS\SYSTEM32\SPOOLVS.EXE Trojan.Vundo/Variant-Installer [load] C:\WINDOWS\SYSTEM32\JKKJK.EXE C:\WINDOWS\SYSTEM32\JKKJK.EXE [load] C:\WINDOWS\SYSTEM32\JKKJK.EXE [load] C:\WINDOWS\SYSTEM32\JKKJK.EXE C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\LOCAL SETTINGS\TEMP\RCX10.TMP C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\LOCAL SETTINGS\TEMP\RCXB.TMP C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\MY DOCUMENTS\OTHER STUFF\JKKJK.EXE C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\START MENU\PROGRAMS\STARTUP\FINDFAST .EXE C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\START MENU\PROGRAMS\STARTUP\FINDFAST .EXE C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\START MENU\PROGRAMS\STARTUP\FINDFAST .EXE C:\WINDOWS\SYSTEM32\IEUPDATES.EXE C:\WINDOWS\SYSTEM32\PMNNM.EXE C:\WINDOWS\SYSTEM32\RCX12.TMP C:\WINDOWS\SYSTEM32\RCX13.TMP C:\WINDOWS\SYSTEM32\RCX14.TMP C:\WINDOWS\SYSTEM32\RCX15C9.TMP C:\WINDOWS\SYSTEM32\RCX16.TMP C:\WINDOWS\SYSTEM32\RCX17.TMP C:\WINDOWS\SYSTEM32\RCX19.TMP C:\WINDOWS\SYSTEM32\RCX19F2.TMP C:\WINDOWS\SYSTEM32\RCX1B.TMP C:\WINDOWS\SYSTEM32\RCX1D.TMP C:\WINDOWS\SYSTEM32\RCX20.TMP C:\WINDOWS\SYSTEM32\RCX2F.TMP C:\WINDOWS\SYSTEM32\RCX384.TMP C:\WINDOWS\SYSTEM32\RCX38A4.TMP C:\WINDOWS\SYSTEM32\RCX6F7A.TMP C:\WINDOWS\SYSTEM32\RCXD.TMP C:\WINDOWS\SYSTEM32\RCXD9E.TMP C:\WINDOWS\SYSTEM32\SSTQR.EXE C:\WINDOWS\Prefetch\FINDFAST .EXE-2689B7E5.pf C:\WINDOWS\Prefetch\FINDFAST .EXE-178209D4.pf C:\WINDOWS\Prefetch\IEUPDATES.EXE-04E09A91.pf C:\WINDOWS\Prefetch\JKKJK.EXE-332A4B1F.pf Adware.Vundo-Variant/Small-A HKLM\Software\Classes\CLSID\{44516c8c-2ead-4a71-bb41-652785629fba} HKCR\CLSID\{44516C8C-2EAD-4A71-BB41-652785629FBA} HKCR\CLSID\{44516C8C-2EAD-4A71-BB41-652785629FBA}\InprocServer32 HKCR\CLSID\{44516C8C-2EAD-4A71-BB41-652785629FBA}\InprocServer32#ThreadingModel C:\WINDOWS\SYSTEM32\TYJRNOQH.DLL HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44516c8c-2ead-4a71-bb41-652785629fba} C:\WINDOWS\SYSTEM32\GPGGBULP.DLL C:\WINDOWS\SYSTEM32\KCVQBWXA.DLL C:\WINDOWS\SYSTEM32\LOBJUQXQ.DLL C:\WINDOWS\SYSTEM32\RDVJYQEE.DLL C:\WINDOWS\SYSTEM32\SNJUWIQW.DLL C:\WINDOWS\SYSTEM32\TENGIBHR.DLL C:\WINDOWS\SYSTEM32\TMSUXUIM.DLL C:\WINDOWS\SYSTEM32\TSTMKMDR.DLL C:\WINDOWS\SYSTEM32\VSBTOEIM.DLL C:\WINDOWS\SYSTEM32\YLKWSSBC.DLL Trojan.Unknown Origin HKLM\SOFTWARE\Microsoft\MSSMGR HKLM\SOFTWARE\Microsoft\MSSMGR#Brnd HKLM\SOFTWARE\Microsoft\MSSMGR#PSTV HKLM\SOFTWARE\Microsoft\MSSMGR#SSTV HKLM\SOFTWARE\Microsoft\MSSMGR#SCLIST HKLM\SOFTWARE\Microsoft\MSSMGR#SSLIST HKLM\SOFTWARE\Microsoft\MSSMGR#BSTV HKLM\SOFTWARE\Microsoft\MSSMGR#Data HKLM\SOFTWARE\Microsoft\MSSMGR#LSTV HKLM\SOFTWARE\Microsoft\MSSMGR#MSLIST Malware.System Defender C:\Program Files\SystemDefender Malware.LocusSoftware Inc/PCPrivacyTool C:\Documents and Settings\Compaq_Owner\Application Data\ultra\uninstall.bat C:\Documents and Settings\Compaq_Owner\Application Data\ultra Trojan.ZenoSearch C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\AOL\C_AMERICA ONLINE 9.0\OPTCLEAN.EXE C:\RECYCLER\S-1-5-21-972137851-1090960623-1148931742-1008\DC224.EXE Adware.Tracking Cookie C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@2o7[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@a.findarticles[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adbrite[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adinterax[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adopt.euroclick[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.adbrite[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.associatedcontent[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.bridgetrack[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.digitaljournal[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.expedia[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.linerider[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.mediamayhemcorp[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.movieweb[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pno[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.realtechnetwork[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.web.aol[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@clicksor[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@collective-media[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.auctionworks[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.surfcounters[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@crackserialkeygen[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[3].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@drivecleaner[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@e-2dj6wfk4eldpico.stats.esomniture[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@e-2dj6wgl4qlczehp.stats.esomniture[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ecnext.advertserve[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-knightridder.hitbox[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-myspaceinc.hitbox[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-viacom.hitbox[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fastclick[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fastclick[3].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@findarticles[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hitbox[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@image.masterstats[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@indextools[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@keygen[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.fastclick[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.hotels[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media6degrees[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@partner2profit[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@phg.hitbox[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@qnsr[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@richmedia.yahoo[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@scot.valueclick[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serialdevil[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serialsgalore[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sitestat.mayoclinic[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sound-taxi.crack.serial.keygen.ddlone[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.drivecleaner[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.sphere[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.sphere[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tracking.ezd3[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@traffic.buyservices[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@valueclick[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@warezreleases[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@winantivirus[2].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.directnetadvertising[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.drivecleaner[1].txt C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.fullreleases[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@2o7[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ad.yieldmanager[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adbrite[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adinterax[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adlegend[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adopt.euroclick[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adopt.specificclick[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adrevolver[3].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.adbrite[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.addynamix[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.bridgetrack[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.pointroll[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adserver.activediner[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adserver[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@advertising[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@anad.tacoda[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@anat.tacoda[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@apmebf[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ar.atwola[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@atdmt[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@atwola[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@azjmp[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@bluestreak[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@bs.serving-sys[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@burstnet[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@casalemedia[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@counter.hitslink[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@counter7.sextracker[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@counter[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@data3.perf.overture[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@doubleclick[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ehg-foxsports.hitbox[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@enhance[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@fastclick[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@gayteensex[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@goclick[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@hitbox[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@medhelpinternational.112.2o7[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@media.medhelp[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@media6degrees[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@mediaplex[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@msnportal.112.2o7[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@overture[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@perf.overture[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@questionmarket[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@realmedia[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@reunioncom.112.2o7[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@revsci[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@richmedia.yahoo[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@serving-sys[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@sextracker[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@specificclick[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@statcounter[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@statse.webtrendslive[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@synacor.112.2o7[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@tacoda[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@trafficmp[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@tribalfusion[1].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@www.burstnet[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@www.clickmanage[2].txt C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@zedo[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@2o7[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@advertising[2].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@atdmt[2].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@atwola[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@cpvfeed[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@doubleclick[2].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@hotlog[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@questionmarket[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@realmedia[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@revsci[2].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@short-media[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@shortmedia.us.intellitxt[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@spylog[1].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@www.short-media[2].txt C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@zedo[1].txt Adware.Search2Find C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\6LW3MJQR\1202592936[1].EXE C:\PROGRAM FILES\TMP554828.EXE C:\PROGRAM FILES\TMP7367734.EXE C:\WINDOWS\Prefetch\TMP554828.EXE-1F3C6331.pf C:\WINDOWS\Prefetch\TMP7367734.EXE-10956F1C.pf Malware.SpywareSheriff C:\DOCUMENTS AND SETTINGS\GUEST.YOUR-D0F670B45A\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\NJQ8C4AG\SPYWARESHERIFF_SETUP[1].EXE Adware.k8l C:\PROGRAM FILES\COMMON FILES\RTENEFS.HTML Trojan.Downloader-NoName C:\PROGRAM FILES\TMP1645640.EXE C:\PROGRAM FILES\TMP1646250.EXE C:\PROGRAM FILES\TMP1647640.EXE C:\PROGRAM FILES\TMP7364218.EXE C:\PROGRAM FILES\TMP7364500.EXE C:\PROGRAM FILES\TMP9128578.EXE C:\WINDOWS\Prefetch\TMP1645640.EXE-3591BCCA.pf C:\WINDOWS\Prefetch\TMP1646250.EXE-3558F141.pf C:\WINDOWS\Prefetch\TMP1647640.EXE-3883A753.pf C:\WINDOWS\Prefetch\TMP7364218.EXE-0B742A8F.pf C:\WINDOWS\Prefetch\TMP7364500.EXE-1205FE08.pf C:\WINDOWS\Prefetch\TMP9128578.EXE-3322C447.pf Malware.Ultimate Defender C:\PROGRAM FILES\UCLEANER_SETUP.EXE C:\WINDOWS\Prefetch\UCLEANER_SETUP.EXE-1EF3F23D.pf Trojan.Downloader-SpyTool C:\VUNDOFIX BACKUPS\ADSPKHYD.DLL.BAD C:\VUNDOFIX BACKUPS\CTUYYPBP.DLL.BAD C:\VUNDOFIX BACKUPS\JYUFKWTC.DLL.BAD C:\VUNDOFIX BACKUPS\MSCIJAGM.DLL.BAD C:\VUNDOFIX BACKUPS\MXVAKRSI.DLL.BAD C:\VUNDOFIX BACKUPS\NHBYIYVO.DLL.BAD C:\VUNDOFIX BACKUPS\NIGSHXTR.DLL.BAD C:\VUNDOFIX BACKUPS\PCBULLWL.DLL.BAD C:\VUNDOFIX BACKUPS\PNGDUBPG.DLL.BAD C:\VUNDOFIX BACKUPS\POVELURO.DLL.BAD C:\VUNDOFIX BACKUPS\TYWCHGET.DLL.BAD C:\VUNDOFIX BACKUPS\UGFGELDY.DLL.BAD C:\VUNDOFIX BACKUPS\WVKNVWUA.DLL.BAD C:\VUNDOFIX BACKUPS\XUXFKCEC.DLL.BAD C:\VUNDOFIX BACKUPS\YYQPCWHA.DLL.BAD Trojan.Downloader-Gen/HardFall C:\VUNDOFIX BACKUPS\AWVTQ.DLL.BAD Trojan.Downloader-Gen/LIB C:\VUNDOFIX BACKUPS\HBMKAELK.DLL.BAD Trojan.Unclassified/SysOld C:\WINDOWS\111UNINST.EXE Spyware.Melkosoft (CoolWebSearch Variant) C:\WINDOWS\INSTALLER\{71F7149C-09BA-468B-B437-A22DA42185B8}\ZIP.DLL C:\WINDOWS\INSTALLER\{9E0A8340-FF2A-45BC-9C70-B8CB250CE2EF}\ZIP.DLL C:\WINDOWS\INSTALLER\{BB74A9C9-6178-4616-A236-85AACA174C93}\ZIP.DLL C:\WINDOWS\INSTALLER\{BF04DDBB-0809-4264-87D6-9D00518E0AFA}\ZIP.DLL C:\WINDOWS\INSTALLER\{D0DA0EAE-CA90-4A24-B644-EA6BCD111F20}\ZIP.DLL C:\WINDOWS\INSTALLER\{D4998737-DFD7-476F-927B-93A6AA359D96}\ZIP.DLL Trojan.Downloader-Gen/ASE C:\WINDOWS\MS05274114209.EXE Trojan.Unclassified/DRV-Slice C:\WINDOWS\SYSTEM32\DRVPAS.DLL Malware.WinAntiSpyware-Installer C:\WINDOWS\SYSTEM32\DRVPASR.DLL Trojan.Downloader-Gen/Suspicious C:\WINDOWS\SYSTEM32\IEUPDATES .EXE C:\WINDOWS\Prefetch\IEUPDATES .EXE-1397FE88.pf Adware.Vundo Variant/Rel C:\WINDOWS\SYSTEM32\KJKKJ.INI Unclassified.Unknown Origin/System C:\WINDOWS\SYSTEM32\UPDATE32.EXE C:\WINDOWS\Prefetch\UPDATE32.EXE-211BE755.pf Trojan.WinUpdate C:\WINDOWS\SYSTEM32\WINUPDATE.EXE C:\WINDOWS\Prefetch\WINUPDATE.EXE-0F50C4F5.pf Trojan.Unclassifed/WowFX C:\WINDOWS\SYSTEM32\WOWFX.DLL Trojan.Downloader-XLIB C:\WINDOWS\SYSTEM32\XLIBGFL254.DLL Adware.OuterInfo-Installer C:\WINDOWS\TEMP\WIN96D3.EXE C:\WINDOWS\TEMP\WIN9EEE.EXE Trojan.Downloader-Gen/Uni C:\WINDOWS\UNI_EH10.EXE |
|
|
|
|
Feb 10 2008, 11:00 AM
Post
#4
|
|
|
To INSANITY and BEYOND !! Group: Moderator Posts: 10,943 Joined: 10-September 04 From: NJ USA Member No.: 2,608 |
Hi , You sure had a lot of crapola on this PC. Do you have an Antivius program installed?
Lets's get all the stuff off first than we'll get AOL back. Run these online scans ESET Online Scanner Panda ActiveScan? Then follow this BC Tutorial How to Remove WinFixer / Virtumonde Tell us how the PC is running now. -------------------- Can you spare some PC cycles to help FIND A CURE .. BC FOLDING TEAM Click me /info..
ThoughtVent a goodplace to discuss.<<>>>Staying Updated Calendar of Updates. For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear.... |
|
|
|
|
Feb 10 2008, 02:35 PM
Post
#5
|
|
|
New Member Group: Members Posts: 8 Joined: 9-February 08 Member No.: 189,242 |
i told you my computer was junk.
and i don't have an antivirus installed... also, i should've told you before i have dial-up...that sure makes things more difficult for me. an 8 MB download is like a big thing. then the eset online scanner said 'update failed' and it just sat there for 20 minutes with that message displayed. i'm trying the vundofix now. is there any way you could just get the computer to a point where system recovery will work? because i think it would just be easier to do that than go through all this mess...system recovery would get rid of all the viruses and junk, right? i don't care if i lose programs or anything...i just want it to work... i'll let you know how it goes after vundofix i guess. |
|
|
|
|
Feb 10 2008, 03:14 PM
Post
#6
|
|
|
New Member Group: Members Posts: 8 Joined: 9-February 08 Member No.: 189,242 |
vundofix removed 2 things. i don't know if there's a log and where to find it, or if you need it.
the log for the virtumundobegone: (apparently nothing) [02/10/2008, 14:52:09] - VirtumundoBeGone v1.5 ( "C:\Documents and Settings\Compaq_Owner\My Documents\VirtumundoBeGone.exe" ) [02/10/2008, 14:52:14] - Detected System Information: [02/10/2008, 14:52:14] - Windows Version: 5.1.2600, Service Pack 2 [02/10/2008, 14:52:14] - Current Username: Compaq_Owner (Admin) [02/10/2008, 14:52:14] - Windows is in SAFE mode with Networking. [02/10/2008, 14:52:14] - Searching for Browser Helper Objects: [02/10/2008, 14:52:14] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar Helper) [02/10/2008, 14:52:14] - BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj Class) [02/10/2008, 14:52:14] - BHO 3: {4ED31630-1471-430F-8A2D-3C167FAB415F} () [02/10/2008, 14:52:14] - WARNING: BHO has no default name. Checking for Winlogon reference. [02/10/2008, 14:52:14] - Checking for HKLM\...\Winlogon\Notify\jkkjk [02/10/2008, 14:52:14] - Key not found: HKLM\...\Winlogon\Notify\jkkjk, continuing. [02/10/2008, 14:52:14] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class) [02/10/2008, 14:52:14] - BHO 5: {8600AC1E-BE58-4FFC-BD5D-F2A8EC38C838} (SnapToolbarHelper Class) [02/10/2008, 14:52:14] - BHO 6: {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} (hpWebHelper Class) [02/10/2008, 14:52:14] - Finished Searching Browser Helper Objects [02/10/2008, 14:52:14] - Finishing up... [02/10/2008, 14:52:14] - Nothing found! Exiting... hm. i wonder if i can say my dog ate my computer, and best buy will give me another one. 
|
|
|
|
|
Feb 10 2008, 03:44 PM
Post
#7
|
|
|
To INSANITY and BEYOND !! Group: Moderator Posts: 10,943 Joined: 10-September 04 From: NJ USA Member No.: 2,608 |
Well you're pretty clean now. You should start a new topic in the proper Operating system forum with your other problem. Or tolearn how to restore or format.
-------------------- Can you spare some PC cycles to help FIND A CURE .. BC FOLDING TEAM Click me /info..
ThoughtVent a goodplace to discuss.<<>>>Staying Updated Calendar of Updates. For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear.... |
|
|
|
|
Feb 10 2008, 05:49 PM
Post
#8
|
|
|
New Member Group: Members Posts: 8 Joined: 9-February 08 Member No.: 189,242 |
well it doesn't seem like i'm clean, the computer's still starting up pretty slow, the 'windows security alert' is still in the taskbar, still spyware alerts popping up, and aol still doesn't work without the startup disc in.
do you have any other ideas? and btw, thanks for helping me get whatever i got off of here so far. |
|
|
|
|
Feb 10 2008, 06:04 PM
Post
#9
|
|
|
To INSANITY and BEYOND !! Group: Moderator Posts: 10,943 Joined: 10-September 04 From: NJ USA Member No.: 2,608 |
You cn run the scans again they may still find pieces and left overs that could not be fully cleaned. But If you are going to travel the net without at least an AV it won't be long till your PC just shuts itself back down.
You can also post a HiJack This log here and get further help deep cleaning the machine Preparation Guide for use before posting a HijackThis Log And You're welcome. -------------------- Can you spare some PC cycles to help FIND A CURE .. BC FOLDING TEAM Click me /info..
ThoughtVent a goodplace to discuss.<<>>>Staying Updated Calendar of Updates. For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear.... |
|
|
|
|
Feb 10 2008, 06:53 PM
Post
#10
|
|
|
New Member Group: Members Posts: 8 Joined: 9-February 08 Member No.: 189,242 |
like i said before, i have dial-up, and i like to skip downloading things if i can. therefore, i went straight to downloading hijackthis...i don't know if that is a big deal or not. but i have the log...i don't know what to fix or anything or what's wrong, but i guess that's why my computer is so screwed up...
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 6:49:41 PM, on 2/10/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\windows\System32\smss.exe C:\windows\system32\winlogon.exe C:\windows\system32\services.exe C:\windows\system32\lsass.exe C:\windows\system32\svchost.exe C:\windows\System32\svchost.exe C:\windows\system32\spoolsv.exe C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe C:\windows\shell.exe C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\windows\system32\nvsvc32.exe C:\WINDOWS\system32\HPZipm12.exe C:\windows\system32\svchost.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\Program Files\America Online 9.0\waol.exe C:\Program Files\America Online 9.0\shellmon.exe C:\windows\explorer.exe C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll F2 - REG:system.ini: Shell=Explorer.exe C:\windows\shell.exe F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {4ED31630-1471-430F-8A2D-3C167FAB415F} - C:\WINDOWS\system32\jkkjk.dll (file missing) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: SnapToolbarHelper Class - {8600AC1E-BE58-4FFC-BD5D-F2A8EC38C838} - C:\Program Files\Snap Visual Search\snapbar.dll O2 - BHO: hpWebHelper Class - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O3 - Toolbar: Snap Visual Search - {EF56413F-9398-4DF5-BC88-6FC3B227D5C5} - C:\Program Files\Snap Visual Search\snapbar.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [Printer] C:\windows\system32\printer.exe O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0\AOL.EXE" -b O4 - HKCU\..\Run: [Spoolsv] C:\windows\system32\spoolvs.exe O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - Startup: findfast.exe O4 - Global Startup: autorun.exe O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://aol.musicnotes.com/download/mnviewer.cab O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{8C7383C0-5E53-4477-9A84-91B4943243CC}: NameServer = 205.188.146.145 O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O20 - Winlogon Notify: winepi32 - winepi32.dll (file missing) O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD DE\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe -- End of file - 6493 bytes |
|
|
|
|
Feb 10 2008, 07:26 PM
Post
#11
|
|
|
To INSANITY and BEYOND !! Group: Moderator Posts: 10,943 Joined: 10-September 04 From: NJ USA Member No.: 2,608 |
I have moved your Topic that includes a HijackThis log here to the Misplaced HJT Logs forum. You posted your log in a forum not intended for HijackThis logs analysis and probably missed the directions we provide to those who require assistance. We can only allow topics with such logs in the HijackThis Logs and Malware Removal forum. This restriction is to ensure you get the best help available, from those who specialize in malware anlaysis and removal. It also should prevent you from receiving ineffective or even potentially dangerous advice, whether well meaning or not.
Prior to posting a HJT log, we ask that you please read and follow all instructions in the pinned topic titled Preparation Guide For Use Before Posting A Hijackthis Log. Following the steps in this Guide will allow the HJT Team to quickly help you with specific fixes for what may remain on your system. Please complete all the steps in the Guide. If you have performed some of them already, then just continue with the next. If you can't perform a step, then skip it and continue with the next. The last step will include downloading and using the most current version of HijackThis if the first line of your log does not appear as follows: Logfile of Trend Micro HijackThis v2.0.2 Please note that it is important that HijackThis be run and a log created while in normal mode. If you run it and create your log while in safe mode, you will be asked to redo it again properly. When you have completed those steps, start a new topic in the HijackThis Logs and Malware Removal forum as directed in the Guide to post a new log. Please DO NOT post any more logs to this topic, or post a log again in the wrong forum. The Misplaced HJT Logs forum is strictly a holding area where the BC Staff can assist you with preparations for and to properly post your log. If you have a question or encounter a problem in the Prep Guide, please do post back to this topic; that is what it is here for. When your new HJT log is posted in the proper forum, please reply to this topic with a link to your new topic. Once that is done, a Member of the HJT Team will analyze your log and assist you with step by step instructions to clean your computer or otherwise advise what needs to be done. Thanks for your cooperation and good luck. The BC Staff -------------------- Can you spare some PC cycles to help FIND A CURE .. BC FOLDING TEAM Click me /info..
ThoughtVent a goodplace to discuss.<<>>>Staying Updated Calendar of Updates. For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear.... |
|
|
|
|
Feb 10 2008, 08:40 PM
Post
#12
|
|
|
New Member Group: Members Posts: 8 Joined: 9-February 08 Member No.: 189,242 |
|
|
|
|
|
Feb 12 2008, 11:18 PM
Post
#13
|
|
