Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

HOTKEYSVC, CTHELPER, PCSYNC


  • Please log in to reply
3 replies to this topic

#1 glutton

glutton

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:04:30 AM

Posted 19 April 2005 - 10:43 AM

8 years i've had this computer with the internet and never once had a problem until my brother came home one day, and in 15 minutes on MSN messenger (i knew this would be trouble..) he managed to acquire 10 spyware items for a total of 996 traces!! in 15 minutes!!..

Anyway, a scan with SpySweeper seemed to clean most everything, HOWEVER, ever since then i get alerts in my SpySweeper...

HOTKEYSVC
CTHELPER
PCSYNC

are all running on my comp and the spyware program can do nothing to eliminate them.. Just today i found out they were 'hidden' in the Windows/System folder, but i can't delete them because they're running in memory..

I have Registry First Aid as well and tried deleting all traces of these programs with that, but it did no good... immediately after cleansing (within seconds) the 100 traces re-appeared...

i've tried deleting these files in Safe Mode as well and no luck... Anyone have any suggestions on how to get rid of this junk?!

Since they've been on, none of my programs load up on Start Up...
SpySweeper, Window Washer, Netscape and a couple other default windows apps. used to load up on Start UP but now nothing.. the bar at the bottom is empty aside from the time, and i'm sure it has something to do with this junk... Trying to report these items to SpySweeper has been largely useless.. they simply respond with the same instructions over and over, with no solution, so can anyone help?!

thanks,
scott

BC AdBot (Login to Remove)

 


m

#2 tg1911

tg1911

    Lord Spam Magnet


  • Members
  • 19,274 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:SW Louisiana
  • Local time:02:30 AM

Posted 19 April 2005 - 01:09 PM

Read the pinned post in the HijackThis forum, here
Please read, and follow, all directions carefully.

Then, run a log, and post it in the HJT forum, at this link. Do not, fix anything, yet.
A member, of the HJT Team, will help you out.
It may take a while to get a response, because the HJT Team are very busy. Please, be patient, these people are volunteers. They will help you out, as soon as possible.

NOTE:
Once you have made the post, please, DO NOT make another post in the HJT forum, until it has been responded to by a member of the HJT Team. The first thing they look for, when looking for logs to reply to, is 0 replies. If you make another post, there will be 1 reply. The team member, glancing over the replies, might assume someone is already helping you out, and will not respond. So, just make your post, and let it sit there, until a team member responds. This way you will be taken care of, in the most timely manner.
MOBO: GIGABYTE GA-MA790X-UD4P, CPU: Phenom II X4 955 Deneb BE, HS/F: CoolerMaster V8, RAM: 2 x 1G Kingston HyperX DDR2 800, VGA: ECS GeForce Black GTX 560, PSU: Antec TruePower Modular 750W, Soundcard: Asus Xonar D1, Case: CoolerMaster COSMOS 1000, Storage: Internal - 2 x Seagate 250GB SATA, 2 x WD 1TB SATA; External - Seagate 500GB USB, WD 640GB eSATA, 3 x WD 1TB eSATA

Become a BleepingComputer fan: Facebook

#3 glutton

glutton
  • Topic Starter

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Local time:04:30 AM

Posted 19 April 2005 - 01:59 PM

Thanks for the reply..

Shortly after i wrote the original plea for peace, I rebooted my computer in Safe Mode and tried deleting the files mentioned.. Although i said i had done this before and couldn't delete them, i lied!.. i guess i never did, or at least tried to but couldn't find them because they were previously hidden...

Anyway, i managed to delete all 3 in Safe Mode, then came back to reg. mode,
ran Registry First aid and dumped all the HOTKEYSVC, CTHELPER, PCSYNC strings and then did another SpySweep and VOILA! the first time in 2 months I have no Alerts!! and a couple of my programs actually loaded on Start up this time!!.. not all... just spysweeper.. but it's a start!

thanks,
scott

#4 LoLucky

LoLucky

  • Members
  • 331 posts
  • OFFLINE
  •  
  • Local time:04:30 AM

Posted 19 April 2005 - 02:20 PM

Hi Scott,

Please do follow tg's advice as you are infected by a worm.
also 2 of those files are legitimate files (do you have a Nokia Phone?)

Again i strongly urge you to follow tg's advice.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users