cultchie_girl

Hi again guys, Here's my hijack this log. Computer is slow and i cleared 27 infected files through spyware doctor last night, however the original problems still remain., Currently getting pop ups from spyware doctor saying my ignore list is corrupt and will be reset. i've done a full system scan and cleared the files as it recommended but the same pop up is recurring. also got a yellow triangle with an exclamation mark in it saying that there was a file in my spyware doctor that was corrupt. something which ended in idbus or something. i know this is very vague but i can't get the warning to

the internet explorer on my desktop is called Internet Explorer (No Add-Ons) When opened it redirects me to a page called "about:NoAdd-ons" in the address bar it previously was weblinks4allbiz i think? only i assume my computer has tried to block it. the actual address is in my original first post. thanks.

Logfile of HijackThis v1.99.1 Scan saved at 01:33:45, on 24/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\Grisoft\AVGFRE~

Logfile of HijackThis v1.99.1 Scan saved at 22:50:54, on 23/02/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\Grisoft\AVGFRE~

Hi again, exams over, back home to sort out computer... again!! ok, i couldnt initially get the computer to open in safe mode, so the results of the scan in normal mode are as follows... --------------------------------------------------------- AVG Anti-Spyware - Scan Report --------------------------------------------------------- + Created at: 13:04:02 18/02/2007 + Scan result: C:\System Volume Information\_restore{8DA3EC41-3D3B-47E1-BB88-C65E4813ED86}\RP104\A0020457.exe -> Adware.Maxifiles : Cleaned. C:\Program Files\Common Files\{1F7D14E1-0710-2057-0915-03041103002c}\system.dll ->

sorry its so long between replies, currently studyin for final uni exams so never home! here'sthe hijack this log from tonight Logfile of HijackThis v1.99.1 Scan saved at 22:04:12, on 20/01/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Ex

Hi again uploaded the malware file for your attention here also is the panda scan results Thanks Emma Incident Status Location Potentially unwanted tool:Application/MyWebSearch Not disinfected c:\progra~1\mywebs~1\

Hi there, As requested SmitFraudFix v2.132 Scan done at 14:49:16.18, 02/01/2007 Run from C:\Documents and Settings\PC User\Desktop\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is FAT32 Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»Â

hi guys, used this site a while ago to help with some pc problems and now i'm back the problems are pretty non specific - im currently running spyware doctor and AVG to get rid of virus/spyware files but certain trojan warnings keep coming up despite "healing" them my computer is very slow of late, and i was wondering is this related to a hidden virus or the fact that i've just started using MP3 rocket also, instead of MSN starting as my home engine its "http://web.links4all.biz/" - another virus per chance!? as you can tell i'm pretty clueless! thanks guys! Emma ps here's my hijack this fil

hi guys, used this site a while ago to help with some pc problems and now i'm back the problems are pretty non specific - im currently running spyware doctor and AVG to get rid of virus/spyware files but certain trojan warnings keep coming up despite "healing" them my computer is very slow of late, and i was wondering is this related to a hidden virus or the fact that i've just started using MP3 rocket to downloads some tunes for my nano also, ipod itunes has recently messed up with my computer too just wondering if its all related?! also, instead of MSN starting as my home engine its "http://

thanks so much Rock, much appreciated for your help. have installed all your recommendations and look forward to a clean PC life in future!! i woulda went mad without the help of the best techies! Emma

that file wasnt there rock the log is now this.. Logfile of HijackThis v1.99.1 Scan saved at 00:52:27, on 23/04/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\PROG

about:buster log Scanned at: 23:45:47 on: 22/04/2005 -- Scan 1 --------------------------- About:Buster Version 4.0 Reference List : 26 ADS not scanned System(FAT) Removed 3 Random Key Entries Removed! : C:\WINDOWS\System32\diqwj.dat Attempted Clean Of Temp folder. Removed Uninstall Key (HSA) Removed Uninstall Key (SE) Removed Uninstall Key (SW) Pages Reset... Done! -- Scan 2 --------------------------- About:Buster Version 4.0 Reference List : 26 ADS not scanned System(FAT) Attempted Clean Of Temp folder. Pages Reset... Done! hijack:this log Logfile of HijackThis v1.99.1 Scan saved at 23:5

it says that the database is either corrupt or missin when i downloaded the about:buster. any other places i can get it? wasn't on download.com. and tried some of the other sites too - but to no avail. help! emma

Logfile of HijackThis v1.99.1 Scan saved at 18:13:46, on 17/04/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Gr

k rock, i did as requested but when lookin to fix some files both of the ones with the 04-hklm\..\runOnce were not present. also when looking to delete files, system32\sdkyy.exe wasnt there, neither was system32\netij.dll(there was a netid.dll - that it?) the log file now looks as follows... Logfile of HijackThis v1.99.1 Scan saved at 17:54:28, on 17/04/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C

Hey everyone, it would be greatly appreciated if someone could take a look at this log and tell me whats suspicious i have already downloaded Ad-aware and spybot search and destroy - no amount of deleting and immunizing has gotten rid of the last 3 culprits according to Spybot. coolwwwsearch.aff.winshow URLSearchHook.Atlpz Startpage-EH i downloaded the free version of spyware doctor which detected 243 infected files - EEK! so im at a loss as to where to go next. i have also tried AVG anti virus which found the trojan - and again failed to delete it. my norton antivirus settings have expired an