tony_15

Logfile of HijackThis v1.99.1 Scan saved at 3:27:18 PM, on 3/6/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe C:\Pro

Hmm, News: I went to uninstall some crap...like tool bars i got somehow... And i came across "legacy 6.0" a tool i had downloaded for a geography report to make a family tree. I went to uninstall it and it said a whole bunch of stuff like "do you want to uninstall blahahaha.system32/xg//rrs" and so on.... should i try to uninstall it or is that dangerous or something...?

I got to CWS remover and stopped for i could not find a way using the internet to download it. everytime i clicked the link you gave me i was directed to some gay msn search engine. I'm assuming this is what you were trying to help me remove... How ironic... Should i leave that step till later or what? I'm sorry i did not reply sooner, i have been away... and it seems the virus has progressed

Logfile of HijackThis v1.99.1 Scan saved at 8:09:50 PM, on 2/17/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\

my msn ver. also, just incase it could help... Log of MsnVirRem by Skate_Punk_21 Fri 02/17/2006 09:09 AM Setting Allowances for Registry Tools... Editing Registry... Rewriting Host File... Finding/Killing local link... ---Infection Files Removed--- ECHO is off.

VundoFix V4.2.22 Scan started at 10:10:21 PM 2/14/2006 Listing files found while scanning.... C:\WINDOWS\system\drvimg.dll C:\WINDOWS\system\gmivrd.ini C:\WINDOWS\system\gmivrd.bak1 C:\WINDOWS\system\gmivrd.bak2 C:\WINDOWS\system\gmivrd.ini2 C:\WINDOWS\system\gmivrd.tmp C:\WINDOWS\system32\req.dll C:\WINDOWS\SYSTEM\gmivrd.bak1 C:\WINDOWS\SYSTEM\gmivrd.bak2 C:\WINDOWS\SYSTEM\gmivrd.tmp C:\WINDOWS\SYSTEM\gmivrd.ini C:\WINDOWS\SYSTEM\gmivrd.ini2 C:\WINDOWS\SYSTEM\drvimg.dll C:\WINDOWS\SYSTEM\gmivrd.ini2 C:\WINDOWS\SYSTEM\gmivrd.bak2 C:\WINDOWS\SYSTEM\gmivrd.tmp C:\WINDOWS\SYSTEM\gmivrd.ini C:\WIN

Logfile of HijackThis v1.99.1 Scan saved at 11:54:44 AM, on 2/16/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files

hmm it doesnt apear to have worked...although it did manage to scare me by deleting like four files in system32 heres rhe c:\vundofix.txt VundoFix V4.2.22 Scan started at 10:10:21 PM 2/14/2006 Listing files found while scanning.... C:\WINDOWS\system\drvimg.dll C:\WINDOWS\system\gmivrd.ini C:\WINDOWS\system\gmivrd.bak1 C:\WINDOWS\system\gmivrd.bak2 C:\WINDOWS\system\gmivrd.ini2 C:\WINDOWS\system\gmivrd.tmp C:\WINDOWS\system32\req.dll C:\WINDOWS\SYSTEM\gmivrd.bak1 C:\WINDOWS\SYSTEM\gmivrd.bak2 C:\WINDOWS\SYSTEM\gmivrd.tmp C:\WINDOWS\SYSTEM\gmivrd.ini C:\WINDOWS\SYSTEM\gmivrd.ini2 C:\WINDOWS\SYST

Sorry, me again. What happened there was, i was too lazy and it took more than five minutes so i went ahead and did it without checking the box. about a minute or two later, when i had booted my computer back up. i realized it was still not working... ie. limewire kept popping up and control alt delete wasn't working... I retried the program to clean my computer of the virus, this time checking the box, it popped up in about twenty seconds, and seemed to be going smoothly. It found no virus, or infected files....

VundoFix V4.2.22 Scan started at 10:10:21 PM 2/14/2006 Listing files found while scanning.... C:\WINDOWS\system\drvimg.dll C:\WINDOWS\system\gmivrd.ini C:\WINDOWS\system\gmivrd.bak1 C:\WINDOWS\system\gmivrd.bak2 C:\WINDOWS\system\gmivrd.ini2 C:\WINDOWS\system\gmivrd.tmp C:\WINDOWS\system32\req.dll C:\WINDOWS\SYSTEM\gmivrd.bak1 C:\WINDOWS\SYSTEM\gmivrd.bak2 C:\WINDOWS\SYSTEM\gmivrd.tmp C:\WINDOWS\SYSTEM\gmivrd.ini C:\WINDOWS\SYSTEM\gmivrd.ini2 C:\WINDOWS\SYSTEM\drvimg.dll C:\WINDOWS\SYSTEM\gmivrd.ini2 C:\WINDOWS\SYSTEM\gmivrd.bak2 C:\WINDOWS\SYSTEM\gmivrd.tmp C:\WINDOWS\SYSTEM\gmivrd.ini C:\WIN

Alright, no clue how i got it or anything. I told my friend that my Limewire wouldnt stop resurfacing after i closed it, and that my ctrl+alt+delete was not working. Anyway he recomended you guys... So i went to copy the text and every time it would close in about two seconds, so i had to be all sneaky and right click + a, ctrl + c here it is Logfile of HijackThis v1.99.1 Scan saved at 4:11:20 PM, on 2/14/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDO