Over 1 million tech questions and answers.

Help With Hijacklog Please, Ran Alot Of Spyware Removing Programs...

Q: Help With Hijacklog Please, Ran Alot Of Spyware Removing Programs...

I have spywares and viruses and stuff (advertisements), so far nothing helped, so I'm leaving it too you guys. I'm not sure what exactly I have, so I'm sorry I cant lead you in the right direction, but here is the log, thanks.MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\ishost.exeC:\WINDOWS\System32\isnotify.exeC:\WINDOWS\System32\issearch.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Java\jre1.5.0_07\bin\jusched.exeC:\WINDOWS\System32\f59e4d4a.exeC:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exeC:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exeC:\WINDOWS\System32\ismon.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\System32\wuauclt.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Documents and Settings\Brian Fuller\Desktop\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://yahoo.com/O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dllO2 - BHO: (no name) - {873eb32d-ae1a-4183-89bd-45a77f761be4} - C:\WINDOWS\System32\ixt0.dllO2 - BHO: (no name) - {f7d40011-29bb-43eb-9c97-875ce89e9e36} - C:\WINDOWS\System32\hp100.tmpO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO3 - Toolbar: Safety Bar - {052b12f7-86fa-4921-8482-26c42316b522} - C:\Program Files\Safety Bar\Safety Bar.dllO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exeO4 - HKLM\..\Run: [f59e4d4a.exe] C:\WINDOWS\System32\f59e4d4a.exeO4 - HKCU\..\Run: [f59e4d4a.exe] C:\Documents and Settings\Brian Fuller\Local Settings\Application Data\f59e4d4a.exeO4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeO4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exeO4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dllO16 - DPF: {25365FF3-2746-4230-9DA7-163CCA318309} (Automatic Driver Installation Control) - http://inst.c-wss.com/141p/html/gtdownlr.cabO16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://photo.walgreens.com/WalgreensActivia.cabO21 - SSODL: coursings - {f8d02387-789a-4c0f-a1d8-8a93f33ee4df} - C:\WINDOWS\System32\yephk.dll (file missing)O21 - SSODL: cholecyst - {ee2975b6-e8d5-405e-8448-8fe9590f6cfb} - C:\WINDOWS\System32\mzoeut.dll (file missing)O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe

RELEVANCY SCORE 200
Preferred Solution: Help With Hijacklog Please, Ran Alot Of Spyware Removing Programs...

I recommend downloading and running DAP. It can help sort out any driver and firmware related issues on your system

It's worked out well for many of us in the past.

You can download it direct from this link http://downloaddap.org. (This link will open the download page of DAP so you can save a copy to your computer.)

A: Help With Hijacklog Please, Ran Alot Of Spyware Removing Programs...

hello?

Read other 3 answers
RELEVANCY SCORE 65.6

Well the problem is as topic states:

If I uninstall adaware and reinstall it it still wont make a difference...Adaware and other programs such as teamspeak simply wont work anymore.

Heres a link to the original spyware remove thread so you guys can see what was changed. Note that at the start of this topic Adaware still ran fine on my machine, after all spyware was gone it refused to work.

Original topic:

http://www.techsupportforum.com/showthread.php?t=35620

Hope you guys can help out!

Read other answers
RELEVANCY SCORE 58.8

I have 4 anti-spyware programs at the moment, and 2 of them are finding infections that they cant remove and are showing up again and again.

1. First, ad-aware keeps finding 'Win32.TrojanDownloader.Small' and cant remove it. heres the log info:

Name:Win32.TrojanDownloader.Small
Category:Malware
Object Type:Regkey
Size:13 Bytes
Location:interface\{2e4bb6be-a75f-4dc0-9500-68203655a2c4}\
Last Activity:12-11-2006
Relevance:Low
TAC index:7
Comment:
Description:Trojan downloader. Downloads and installs software in stealth.

i tried removing the registry entry manually, but windows wont let me, even on a safe mode boot (probably for the same reason it wont let ad-aware remove it...)

2. Second, Spyware Doctor finds 11 registry entries that it tries, but cant remove.

Scan Results:
scan start: 12/12/2006 7:50:44 AM
scan stop: 12/12/2006 8:12:48 AM
scanned items: 118917
found items: 11
found and ignored: 0
tools used: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, ActiveX Scanner, Browser Activity Scanner, Hosts file scanner, Browser Defaults, Favorites and ZoneMap Scanner, Disk Scanner

Infection Name Location Risk
I-Search Desktop Search Toolbar HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE Elevated
I-Search Desktop Search Toolbar HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE## Elevated
I-Search Desktop Search Toolbar HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE##NextInstance Elevated
I-Search Deskto... Read more

A:Solved: anti-spyware programs not removing all infections

Read other 9 answers
RELEVANCY SCORE 58.8

Hi. For a couple of days now my computer was freezing randomly or giving me a "General Host Process for Win32 Services" error which shutdown the "DCOM server Process Launcher" and forced me to restart my PC. I resolved this problem by changing the DCOM Launcher to restart the program itself when it fails instead of restarting the entire system, saving me some sanity. I don't know if it is completely resolved but after looking into the error, svchost.exe was the programs involved with the error. However (here's the real problem), after doing this and running a full Norton Scan and a full SuperAntiSpyware scan (coming up with no hits on either), I suddenly have this little red X in the system tray icon that keeps popping up with "Warning! Security report - Your computer is infected! It is recommended to start spyware cleaner tool." This looks like a rogue spyware program to me and I don't know how to get rid of it and I don't want to click on it since it will probably open a Windows Explorer window to an infected site when I use Firefox as my default browser and never even mess with IExplorer. I ran a HijackThis scan and here is my logfile text which should help hopefully. Thanks.
 

Read other answers
RELEVANCY SCORE 56

I accidentally installed a pretty bad concoction of spyware and malware and whateverelseware. My default homepage automatically jumps to syssecuritypage.com and it keeps wanting me to download software to remove the spyware and whatnot. I dont do that of course. I tried running my version of Lavasoft Ad-Aware Professional. It found stuff but still infected. Below is my HiJackThis Log:Logfile of HijackThis v1.99.1Scan saved at 10:48:52 PM, on 8/1/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\PROGRA~1\COMMON~1\Stardock\SDMCP.exeC:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exeC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\WINDOWS\eHome\ehRecvr.exeC:\WINDOWS\eHome\ehSched.exeC:\WINDOWS\... Read more

A:Spyware/malware Hijacklog

Hello and welcome. You have quite the infections there ;).. Let's get rid of them!Please download SmitfraudFix (by S!Ri)Extract the content (a folder named SmitfraudFix) to your Desktop.Open the SmitfraudFix folder and double-click smitfraudfix.cmdSelect option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).Please copy/paste the content of that report into your next reply.Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.http://www.beyondlogic.org/consulting/proc...processutil.htmDownload win32delfkil.exe.Save it on your desktop.Double click on win32delfkil.exe and install it. This creates a new folder on your desktop: win32delfkil.Close all windows, open the win32delfkil folder and double click on fix.bat.The computer will reboot automatically.Post the contents of the logfile c\windelf.txt.Open HiJackThis. It should open to a "New users quickstart" menuClick "Open the Misc Tools section"Click "Delete a file on reboot..."In the "Enter file to delete on reboot..." window, navigate to:C:\WINDOWS\SYSTEM32And select the filewindrx32.dllThen click Open. After you click Open, HiJ... Read more

Read other 16 answers
RELEVANCY SCORE 55.2

Hello

I have a program that shows up as an IV an ending task window when I shut down my computer.

It is called sunkist.notifycondata.hwnd.I have an upto date Trend Micro installed and it doesn't get rid of it

I can't find anything about it on the internet. My computer has been painfully slow the last few months. Any help would be greatly appreciated.
Feel free to email me at Dave_Linduff AT Yahoo. com

Thank You!

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 11:29:31 AM, on 9/26/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Trend Micro\Internet Security 2007\pccguide.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\TmPfw.exe
C:\WINDOWS\system32\dllhost.exe
C:\PROGRA~1\TRENDM~1\INTERN~1\PcScnSrv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Java\jre1.5.0_11\bin\jucheck.exe
C:\... Read more

Read other answers
RELEVANCY SCORE 54.8

I run a dell inspiron e1705 laptop with a core duo processor. And I am running XP

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:17:15 AM, on 2/26/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Seagate\Basics\Service\SyncServicesBasics.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
c:\PROGRA~1\mcafee.com\vso\OasClnt.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\McAfee.com\PER... Read more

Read other answers
RELEVANCY SCORE 52

Help i got alot of spyware like everytime i go to a site two pop ups appear everytime and it redirects my enternet home page i need help plz tell me what to do and i need help fast thank you

A:Help i got alot of spyware

Please download HijackThis http://www.greyknight17.com/spy/HijackThis.exe - this program will help us determine if there are any spyware/malware on your computer. Create a folder at C:\HJT and move HijackThis.exe there. Double click on the program to run it.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Get HijackThis Analyzer http://www.greyknight17.com/spy/KRC%...20Analyzer.zip and save it to the same folder as the hijackthis.log file. Run HijackThis Analyzer and type in 'y' if you agree. The 'result.txt' file will open up in Notepad. Copy the whole result.txt log and post it in the forum. You don't need to post the original hijackthis.log (unless we ask for it). Do not fix anything in HijackThis since they may be harmless.

Please download Ad-aware SE and install it if you don't have it already. Make sure it's the newest version and check for any updates before running it. Also go here to get the plug-in for fixing VX2 variants. To run this tool, go into Ad-aware->Add-ons and select VX2 Cleaner. Then click Run Tool and OK to start it. If it's clean, it will say Status System Clean. Otherwise, you will have to click on the Clean button to remove the VX2 infection. Also make sure to customize the settings in Ad-aware for better scan results. Run the scan and fix everything that it finds.

Download and install Spybot S&D htt... Read more

Read other 4 answers
RELEVANCY SCORE 52

Really new to this forum, was referred by a really good source, said that you could help me... I've done all that was instructed before creating my post. Please review and see if you can identify was good and what's malicious. Would be extremely appreciative. Thank You!Logfile of HijackThis v1.99.1Scan saved at 12:10:27 PM, on 6/15/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exeC:\WINDOWS\System32\DVDRAMSV.exeC:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXEC:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exeC:\WINDOWS\System32\00THotkey.exeC:\WINDOWS\system32\TFNF5.exeC:\Progr... Read more

A:Been Hit With Alot Of Spyware

Hi Thaicon and Welcome to the Bleeping Computer!Download Brute Force Uninstaller to your C:\Unzip it to a folder of its own (C:BFU).BFU should be on your root. In most cases this is C:Download qoofix.bat (rightclick on this link and choose save as)Place qoofix.bat in your C:BFU - folder. (Important!)Doubleclick qooFix.bat, Close all browsers and explorer folders.Choose option 1 (Qoolfix autofix) and follow the prompts.Please be patient, it will take about five minutes.After the PC has restarted please post another hijackthis log.After restarting,please run this Online Scanhttp://www.ewido.net/en/onlinescan/Once the scan is complete--> Click Save Report and Save it to your desktop for easy access.After saving the report--> Let ewido remove all it found.Post back with a fresh HijackThis log and the report from Ewido.

Read other 1 answers
RELEVANCY SCORE 52

Hi im new to this forum... and a real newb when it comes to PC security pls tell me what I should fix. Here is the Highjack This Log from my other computer.

Logfile of HijackThis v1.99.0
Scan saved at 4:45:34 PM, on 1/17/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\GWMDMMSG.exe
C:\@Home\tioga\bin\tgcmd.exe
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Grisoft\AVG Free\avgwb.dat
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\AdwareSpy\AdwareSpy.exe
C:\Documents and Settings\NO NEWB\My Documents\My Received Files\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search... Read more

A:HTJ Log, My Other PC Has alot of spyware!

Read other 16 answers
RELEVANCY SCORE 52

The main problem on my system is the spyware XP Antispyware 2009. A relative of mine installed this when I wasn't around. I cannot figure out how to uninstall it. I know I also have other spyware/malware on my system. Any help given is appreciated.

Here's my HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:58:58 PM, on 10/22/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\IPSSVC.EXE
C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TPHDEXLG.EXE
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Program Files\ThinkVantage\SystemUpdate\UCLauncherService.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\ThinkPad\ConnectUtilities\AcSvc... Read more

A:Alot of spyware and such.

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

If you're not receiving help elsewhere and still require assistance for this issue, please do the following:

------------------------------------------------------

Please explain why this computer has no antivirus program installed and running. This is an open invitation for infection.

It can take as little as eight seconds to infect an unprotected computer.

Please keep this computer offline except when downloading tools and posting in the forum until we get one installed.

------------------------------------------------------
Download RSIT by random/random and Save it to your Desktop.
Double-click RSIT.exe to run the tool.
Click Continue at the disclaimer screen.
When the scan completes it will open a log named log.txt maximized, and a log named info.txt minimized.
Please copy/paste the contents of log.txt and info.txt in your next reply.
------------------------------------------------------

Read other 9 answers
RELEVANCY SCORE 51.6

So i cant really do anything with windows. The folders work, IE works, and some other stuff, but most things on control panel, desktop properties dont work.

The message that comes up when i try to do the desktop properties is:

(title/path)C:\WINDOWS\system32\rundll32.exe

This file does not have a program associated with it for performing this action. Create an association in the folder options control panel.


when i go to that program it says:

Windows cannot open this file
file: rundll32.exe

My computer has been having trouble with the background for a while its white and even when its changed on the properties menu. My mom decided to purchase Advanced registry Optimizer and Advanced System optimizer and idk what she did but that might be a problem, cant uninstall cuz i get the no program associated message.

please ask any questions you need to know to help, this is important.

A:big problem with alot of programs, need help

For the record, registry "Optimizers" are often more harmfull than helpful. Only use programs that offer to "clean" your registry if you know what you are doing...you can seriously harm your operating system if those programs are used incorrectly.

It sounds like you might have been attacked with malware.

Don't Panic! The HJT Support Team are very proficient with these sorts of things.

With that said, we recommend that you read this article? "IMPORTANT - 5 Step Process: Read This Before Posting For Malware Removal Help"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum.
(Simply, click on the coloured links to be re-directed.)

Please ensure that you create a new thread in the HiJackThis Log Help Forum; not back here in this one.

When carrying out The 5 Steps, if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very bu... Read more

Read other 3 answers
RELEVANCY SCORE 51.6

Logfile of HijackThis v1.99.1
Scan saved at 10:24:59 PM, on 4/14/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program ... Read more

A:Alot of Viruses/spyware

Please download & run VundoFix.exePut a check next to Run VundoFix as a task.
Click OK when you will receive a message saying vundofix will close and re-open in a minute or less.
When VundoFix re-opens, click the Scan button followed by the Remove button
** Your desktop will go blank as it starts removing Vundo. **
Restart your computer & post the contents of C:\vundofix.txt and a new HiJackThis log.

Read other 1 answers
RELEVANCY SCORE 51.2

Tried superantispyware, avast. etc etc they get rid of them but they come right back. i think it's a rootkitanyway here is my hijackthis log Please help me anyway possible, I followed the preparation guide, all except the gmer log. because when i tried this it would go crazy opening IE windows and wouldn't stop til i restarted itThank youLogfile of Trend Micro HijackThis v2.0.2Scan saved at 11:45:09 AM, on 3/1/2010Platform: Windows Vista SP2 (WinNT 6.00.1906)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\Windows\vVX1000.exeC:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exeC:\Program Files (x86)\Yahoo!\Search Protection\SearchProtection.exeC:\Program Files (x86)\SlySoft\AnyDVD\AnyDVDtray.exeC:\Program Files (x86)\SUPERAntiSpyware\SUPERAntiSpyware.exeC:\Program Files (x86)\PictureMover\Bin\PictureMover.exeC:\hp\support\hpsysdrv.exeC:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\TSMAgent.exeC:\Program Files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exeC:\Program Files (x86)\Portrait Displays\HP My Display\DTHtml.exeC:\Program Files (x86)\Hewlett-Packard\Media\DVD\DVDAgent.exeC:\Program Files (x86)\Samsung\Samsung Media Studio 5\SMSTray.exeC:\Progr... Read more

A:Mywebsearch problem tried alot of different programs

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. Please include a clear description of the problems you're having, along with any steps you may have performed so far.Please refrain from running tools or applying updates other than those we suggest while we are cleaning up your computer. The reason for this is so we know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.Even if you have already provided information about your PC, we need a new log to see what has changed since you originally posted your problem.We need to create an OTL ReportPlease download OTL from one of the following mirrors:This is THE MirrorSave it to your desktop.Double click on the icon on your desktop.Click the "Scan All Users" checkbox.In the custom scan box paste the following:CODEnetsvcsmsconfigsafebootminimalsafebootnetworkactivexdrivers32%systemroot%�... Read more

Read other 29 answers
RELEVANCY SCORE 51.2

I have been recently having a major problem with my computer, It started as my Firefox and Google chrome crashing pretty often and my pc blue screening then restarting instantly with the error "award bootblock bios v1.0 bios rom checksum error detecting floppy drive a media... drive A error system halt". Ive reformatted my hard drive twice and both time it has continued to happen. Ive checked my Hard drive to see if it was over heating, Its not. Ive checked CPU! From what Ive read it might be my bios but i don't want to flash it with out some one else's opinion.

Here are my specs:
Cpu: AMD Athlon™ 64 X2 Dual Core Processor 4800+
Graphics card: Nvidia Geforce 8600 GT
Ram: 2gb DDR2
Motherboard: Foxconn M61PMV AM2+/AM2 NVIDIA GeForce 6100 Micro ATX AMD Motherboard

A:Pc, browsers and programs crashing alot!

I would interpret that error message as...indicative that your CMOS battery needs to be replaced. Weakening CMOS batteries seem to result in strange error messages about the hardware configuration, in my experience.

Drive A refers to the floppy drive, not the hard drive.

I never advise anyone to do a BIOS update...unless such provides new capability to the system. I don't think such is your situation.

Louis

Read other 5 answers
RELEVANCY SCORE 50.8

help me, my computer is very slow, it gets about 30 popups over a 20 minte period and i really don't want to reformat has i have alot of important work on my computerLogfile of HijackThis v1.99.1Scan saved at 3:45:36 PM, on 8/27/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exeC:\Program Files\Common Files\{6C5C8242-072D-1033-0116-040115030001}\Update.exeC:\PROGRA~1\INCRED~1\bin\IMApp.exeC:\Program Files\ewido anti-spyware 4.0\guard.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Internet Explorer\iexplore.exeC:\DOCUME~1\KIMBER~1\LOCALS~1\Temp\Temporary Internet Files\Content.IE5\01BCVN67\stng260[1].exeC:\... Read more

A:Infected With Alot Of Spyware And Viruses

Hi and welcome to Bleeping Computer! My name is Sam and I will be helping you. Before we can get started on fixing your problem you must change the location of Hijackthis. It should not run from a temp directory. Download and run the HijackThis autoinstall program Please choose the default location of C:\Program Files as the destination.Run the program only from that location from now on. It is essential that you follow these steps or certain important features of the program will not function correctly.Please download ComboFix and save it to your desktop.Double click combofix.exe and follow the prompts.When it's done running it will produce a log for you. Please post that log in your next reply.Important Note - Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

Read other 9 answers
RELEVANCY SCORE 50.8

my comboscan results...

ComboScan v20070306.20 run by Nate Haggard on 2007-03-16 at 23:04:21
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

Successfully created ComboScan Restore Point.


-- Last 5 Restore Point(s) --
87: 2007-03-17 03:02:23 UTC - RP884 - Software Distribution Service 2.0
86: 2007-03-17 00:39:45 UTC - RP883 - Installed Age of Empires III
85: 2007-03-16 19:16:03 UTC - RP882 - Software Distribution Service 2.0
84: 2007-03-16 19:12:56 UTC - RP881 - Software Distribution Service 2.0
83: 2007-03-15 04:25:50 UTC - RP880 - System Checkpoint


-- First Restore Point --
1: 2006-12-17 17:19:36 UTC - RP798 - System Checkpoint


Performed disk cleanup.


-- HijackThis (run as Nate Haggard.exe) ----------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 11:05:05 PM, on 3/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc3... Read more

A:Alot of Spyware/adware/malware...

and Here is my panda log...
Incident Status Location

Potentially unwanted tool:Application/MyWay Not disinfected C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\John Haggard\Cookies\john [email protected][2].txt
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\John Haggard\Cookies\john [email protected][1].txt
Spyware:Cookie/Apmebf... Read more

Read other 2 answers
RELEVANCY SCORE 50.8

... and it's completely shattering my system at present. Start Menu is in tact, but it's pretty much pointless at the moment because when I go to open it, everything has vanished.

Control Panel, Run, Programs, the whole lot of it, gone.

I tried to access my Task Manager...

"Task Manager has been disabled by administrator..."

I tried to get my Desktop up and running again...

"Has been disabled by administrator..."

Every 30 seconds or so, I keep getting these so called Windows Security Alerts that say...

"Windows has detected an Internet attack attempt...
Somebody's trying to infect your PC with spyware or harmful viruses. Run full system scan now to protect your PC from Internet attacks, hijacking attempts and spyware! Click here to download spyware remover for total protection."

Also, where the time clock is located on the far end of the taskbar, there is a "VIRUS ALERT!"

Might I add, I still cannot access my C: and D: drives.

And to top all of this off, any open tab I have on my taskbar will flash every 4 or 5 seconds. Seems like a system stall to me.

Whew... now that we've gotten through all of that, here's a DSS log I recently took.

If there are any other logs you guys need for this situation, just let me know. I will be bookmarking this all weekend in hopes to be up and running.

Thanks.

Deckard's System Scanner v20071014.68
Run by on 2008-08-01 18:22:24
Computer is... Read more

A:Removed alot of Spyware, but a little bit remains.

Hi djcandle

Sorry for the delay in getting to you, the forum is very busy and all our helpers are volunteers.

You may wish to Subscribe to this thread (Thread Tools) so that you are notified when you receive a reply.

P2P - I see you have P2P software <Limewire> installed on your machine. We are not here to pass judgment on file-sharing as a concept. However, we will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. It may be contributing to your current situation. This page will give you further information.


We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool:

http://www.bleepingcomputer.com/comb...o-use-combofix


Please ensure you read this guide carefully and install the Recovery Console first.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should see a blue screen prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
Click Yes to allow ComboFix to continue scanning for... Read more

Read other 1 answers
RELEVANCY SCORE 50.8

Personally,
I've seen a lot of spyware come from mainly

Illegal
Pornographic
"Search Engines"
and toolbar...

sites.

Just make sure you run your spywareblaster, ad-aware, and spybot weekly...
As well, it's always good to have a DECENT ANTI-VIRUS TOOL.

Here's a good one called AVG.. It's made by GRISOFT
and It's already blocked some hacker trying to force his files onto me...

http://grisoft.com
And NEVER click yes to any of the phony things you see online...
If you get a popup that says.. "Do you want to trust..?"
etc...
Make sure you actually know what your getting yourselfs into...
There's one common popup on most illegal sites that popup with
their toolbar... asking if you want to "trust" them...

If you click no..
A popup comes up saying.. "YOU MUST CLICK YES TO CONTINUE!"

Guys.. Don't click yes...
If it keeps popping up after 8 or so times... just leave the site...
Be it ALT CONTROL DELETE and close IEXPLORER or ALT F4 sometimes works...
As well,
Pornographic sites deplete the mind,
stop going to them!

Friendly advice from...
MonkeyJ
 

Read other answers
RELEVANCY SCORE 50.4

i dont no how much spyware there is but i thinks its alot i get messages every 5mins and warning ballons on the taskbarheres the three skan results u wantedKASPERSKY ONLINE SCANNER REPORTTuesday, June 03, 2008 5:18:48 PMOperating System: Microsoft Windows Vista Home Edition, Service Pack 1 (Build 6001)Kaspersky Online Scanner version: 5.0.98.0Kaspersky Anti-Virus database last update: 3/06/2008Kaspersky Anti-Virus database records: 825458Scan SettingsScan using the following antivirus database extendedScan Archives trueScan Mail Bases trueScan Target My ComputerC:\D:\E:\F:\G:\H:\I:\J:\L:\Scan StatisticsTotal number of scanned objects 347083Number of viruses found 6Number of infected objects 13Number of suspicious objects 0Duration of the scan process 02:57:06Infected Object Name Virus Name Last ActionC:\Boot\BCD Object is locked skippedC:\Boot\BCD.LOG Object is locked skippedC:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skippedC:\Program Files\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skippedC:\Program Files\Common Files\Symantec Shared\NFWEVT.LOG Object is locked skippedC:\Program Files\InstallShield Installation Information\{7655E113-C306-11D9-A373-0050BAE317E1}\setup.ilg Object is locked skippedC:\Program Files\InstallShield I... Read more

A:Infected With Alot Of Spyware I Dont No Wot Any Of Its Called

Hello, my name is fenzodahl512 and welcome to Bleeping Computer.. Please do the following...Please download SDFix by Andy Manchesta and save it to your desktop.Double click SDFix.exe and it will extract the files to %systemdrive%(Drive that contains the Windows Directory, typically C:\SDFix)Please then reboot your computer in Safe Mode by doing the following :Restart your computerAfter hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;Instead of Windows loading as normal, a menu with options should appear;Select the first option, to run Windows in Safe Mode, then press Enter.Choose your usual account. In Safe Mode, right click the SDFix.zip folder and choose Extract All, A new folder will be extracted to your %systemdrive%, typically C:\SDFix Open the extracted folder and double click RunThis.bat to start the script. Type Y to begin the script. It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot. Press any Key and it will restart the PC. Your system will take longer that normal to restart as the fixtool will be running and removing files. When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons. Finally open the SDFix folder on your desktop and copy and paste the contents of the results file Report.txt along with any other requested logs at the end of t... Read more

Read other 26 answers
RELEVANCY SCORE 50.4

Brother has been using computer abit of late. Seems to have slowed -alot-
No idea what is causing it - i'm hoping it is something nice and easy to get rid of. Friend told me to come here and paste this.
Thank you so much, if you can help.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:07:56 a.m., on 24/12/2007
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 SP1 (5.50.4134.0600)
Boot mode: Normal

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAM FILES\AVAST4\ASHSERV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\NVATRAY.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\ATI TECHNOLOGIES\ATI CONTROL PANEL\ATIPTAXX.EXE
C:\PROGRAM FILES\AVAST4\ASHWEBSV.EXE
C:\WINDOWS\SYSTEM\LVCOMS.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\AVAST4\ASHMAISV.EXE
C:\PROGRAM FILES\PROPEL ACCELERATOR\PROPELAC.EXE
C:\PROGRAM FILES\SPINACH ANTISPYWARE... Read more

A:System Slow - Picking Up Alot Of Spyware.

Hi,

The forums are really busy, that explains why logs get behind. If you still need some help, please start with posting a new hijackthislog in this thread. Don't start with a new thread.
Then I'll take a look.

Read other 2 answers
RELEVANCY SCORE 50

Hi, i have a serious problem with what seems to be a virus or some other kind of malware but I'm not exactly sure. Anyhow i can't get any programs to work but files associated with the program seem to be able to open (for example i can open a Word document file but not the individual program). Almost all programs have lost their icon pictures and when i try to access these programs by double clicking on them i get the Filealyser window. Control panel doesnt work either and i cant install new programs. I tried installing Hijackthis i get a message that reads like this: "this file does not have a program associated with it for preforming this action. Create an association in the folder options control panel." The weirdest thing though is that before the windows login screen i get a strange pop-up with some strange characters on it.

ANY HELP IS APPRECIATED!!!

A:[B]Almost No Programs Work Including Control Panel And Probably Alot More!!!!![/B]

try a system restore to when everything was ok
if you get back in follow the 5 steps
http://www.techsupportforum.com/showthread.php?t=15968

Read other 6 answers
RELEVANCY SCORE 50

I'm new to the forum.
Someone please tell me how to get my com working faster.
I'm newb.

Great assistance required
 

A:My Com Lags ALOT! HELP! checked for spyware and malware. NONE found.

Read other 6 answers
RELEVANCY SCORE 50

Thank you for replying to my last thread, hopefully this one meets the specifications. Anyway, I run spybot S&D alot and the same spyware keeps coming back each time I run a scan, so I need to remove it manually I think. As a side note, when I set S&D to run at startup (so it isn't interfered with and it can remove stuff I couldn't remove in safe mode) it crashes after about 30 minutes of scanning giving me what I think is a blue screen of death.
DDS (Ver_09-06-26.01) - NTFSx86
Run by User at 4:19:54.26 on Thu 07/16/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3326.2682 [GMT -4:00]

AV: ESET NOD32 Antivirus 4.0 *On-access scanning enabled* (Outdated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\libusbd-nt.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\... Read more

A:Computer crashes/freezes and detects alot of spyware

Ok great, it's disabled my sound again =/. I have to reinstall my hardware for it to work again.

Read other 5 answers
RELEVANCY SCORE 49.2

Xpsp3
deleted wmsdkns.exe in windows
had 2020search, smitfraud-c and a fiew others, "fixed" with spybot s&d. all of this started (i believe) when going to www.packetnews.com and clicked on something.
wouldnt let me install norton 2007 correctly, (running onlince scan right now), I Stoped a bho {8db81de1-f450-42c1-80f5-2879554b-451b} (not sure if its bad, but i am consntly getting that the change is being denied because of me, like 5 every second).

um, had webhancer.

please help me get rid of it all!





Deckard's System Scanner v20071014.68
Run by Chris on 2008-05-12 17:14:11
Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enable...success.


-- Last 1 Restore Point(s) --
1: 2008-05-13 00:14:17 UTC - RP1 - System Checkpoint


Backed up registry hives.
Performed disk cleanup.



-- HijackThis (run as Chris.exe) -----------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:15:15 PM, on 5/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20772)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS... Read more

A:Had all kinds of rogue programs up, went through alot of steps/removals. heres log

Quote:




Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.

If you think you have similar problems, please post a log in the HJT forum and wait for help.




Hello and welcome to the forums

My name is Katana and I will be helping you to remove any infection(s) that you may have.

Please observe these rules while we work:
1. If you don't know, stop and ask! Don't keep going on.
2. Please reply to this thread. Do not start a new topic.
3. Please continue to respond until I give you the "All Clear"
(Just because you can't see a problem doesn't mean it isn't there)

If you can do those three things, everything should go smoothly

----------------------------------------------------------------------------------------
I apologize for the delay in responding, but as you can probably see the forums are quite busy.
Unfortunately there are far more people needing help than there are helpers.
If you still require help please post a fresh HJT log
Installed Programs

Please could you give me a list of the programs that are installed.Start HijackThis
Click on the Misc Tools button
Click on the Open Uninstall Manager button.
You will see a list with the programs installed in your computer.
Click on save list button and specify where you would like to save this file.
When you press Save button a notepad will open with the contents ... Read more

Read other 1 answers
RELEVANCY SCORE 47.2

i am having a warning on my desktop for spyware from raze spyware . pls help me in removing it

A:Removing The Warning For Spyware From Desktop (raze Spyware)

Hi yoagaashRaze Spyware is a rogue Anti-Spyware program, see Here for more information.The first thing to do is see if you can uninstall it from Add or Remove.Click on start, settings, control panel and double-click on Add or Remove Programs. From within Add or Remove Programs uninstall the following ...if it exists:Raze SpywareThenReboot your computer into Safe ModeThen delete this folder (Do not be concerned if it does not exist)C:\Program Files\Raze SpywareReboot your computer to go back to normal modeSee if this helps, if not come back and let us know.

Read other 1 answers
RELEVANCY SCORE 47.2

My PC (XP Pro SP1) was infected with several spywares. I've run several anti-spyware utilities, until no traces of infected files reported, such as MS AntiSpyware, Adware, Spybot Search & Destroy, CWShedder. I've removed all detected spywares, also, deleted SPY SHERIFF in ADD/REMOVE Programs, manually deleted infected files that Norton AntiVirus cannot quarantined/no action taken & empty Recycle bin. So, I thought my PC is safe...but lately I've notived that my desktop display background has changed to "SPYWARE INFECTION ...blah,blah"

Can anyone guide me step by step on how to eradicate SPYWARE for good in my PC? as well as get my desktop display back to normal is very much appreciated.

Thanks in advance!!!
 

A:need help removing SPYWARE & getting rid of SPYWARE INFECTION as display background

Read other 8 answers
RELEVANCY SCORE 46.4

I have two two programs on my Add/Remove programs list that I've already uninstalled. The Sims: Livin' Large, and Macromedia Freehand 10. The Sims is over 600MB, and Freehand doesn't show a size next to the program name. I've already uninstalled them both via Add/Remove programs, and I've deleted both the folders from the Program Files folder, but they don't leave the Add/Remove programs list. I click to uninstall the Sims again, and nothing happens. I try to uninstall Freehand and it says:

An installation support file could not be installed. The system cannot find the specified file.

Could anybody help me get these things off my programs list? And another small side question: I rolled back to Windows Media Player 10 months ago, but Windows Media Player 11 Format runtime is still present on my list. Is it safe to uninstall? Any help would be appreciated, thanks.
- Kanye

A:Removing Deleted Programs From Add/remove Programs

Hello Kanye,I see you have an open HJT log posted in the HijackThis Logs and Malware Removal forum.You shouldn't make any changes to your system, while your HJT log is posted, as that could change the results of the posted log, making it difficult to properly clean your system.At this point, the HJT Team should be the only members that you take advice from, until they have verified your log as clean.I'm closing this topic until you are cleared by the HJT Team. If, after your log has been cleaned, you still need help, please PM a Moderator and we will re-open this topic.If you have any questions, don't hesitate to send me a PM.

Read other 6 answers
RELEVANCY SCORE 46

I have ran hijack this and saved the log. It has been posted on here. I am not able to do anything without different types of popups coming up. I also get security messages popup stating that I can't run that I am trying to open because it is infected. Please take a look at the log and let me know what needs to be done next. Thank you.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:24:29 AM, on 11/8/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\rpcnet.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Apoint\Apoint.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\syst... Read more

A:Hi there I am getting alot of popups and it shows getting alot of viruses

I understand that it could take a day or two to look at my issue, but I had been waiting a couple of days and I see where others who had posted after me is being helped. I don't mean to bump up this thread but any help would be appreciated. Thanks.
 

Read other 2 answers
RELEVANCY SCORE 45.2

A couple days ago I found myself infected with spyware and trojans. My virus scanner started blocking repeated trojan attacks, and I found that my Firefox browser was messed up. I could not run searches on google, access my gmail account, or go onto youtube. Things that I could do in IE or if I ran my computer in safe mode w/ networking. I ran adaware personal and removed one trojan, but still my browser was messed up and not allowing me to view certain sites and overall acting really slow. I downloaded the HijackThis program and resolved to get a log and see if I could spot anything, and perhaps upload it to one of the many forums that offer help. I ran the scan and noticed that I could upload the log to trendmicro, I tried that and the entire program shut down with an error. I hit the "more info" button, and saw a specific dll in my windows/system32 directory looked to have interfered with it. It was an "awtqnkhe.dll." I went into safe mode to try and delete it as that has worked in the past, and I had no luck removing it. I ran the combofix program, but that seems to have helped little if at allToday, I started to work on the problem again and its only worsened. I get frequent error messages especially when browsing something like "My Computer." They'll say that there are problems with a rundll32.exe and needs to be shut down, among other myriad of messages. At times I'll get a buffer overflow which forces explorer to shut down. When shutting ... Read more

A:Trojan & Spyware, Hijacked Browser, Intefering With Spyware Removal Programs (awtqnkhe.dll)

Hello jwbowyer,

Welcome to Bleeping Computer

Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.

Thanks,
tea

Read other 2 answers
RELEVANCY SCORE 45.2

I'm running Windows 7 and a few months back had to remove Snap.do and some other unwanted programs.  I managed to get them off, I beleive.  I'm not sure, but I beleive I had to delete some folders to get them off fully. Subsequent Superantispyware runs did not report any unwanted programs.
This morning Avast alerted me Snap.do was back.  I opened a browser and confirmed the home page was hijacked.  Avast said it could remove it for me and when I looked, the home page was back and Snap.do wasn't on my list of programs in control panel>prorams and features.
I ran malware bytes and nothing too bad was found.  I ran Superantispyware and it reported regcleaner pro, Advanced Sysrem Protector and AppsHat Mobile Apps were installed.  I let the Super antispyware try to remove them and also cleaned out some tracking cookies.  I cehcked programs and the 3 weren't there.  Re-running Super antispyware however keeps reporting they're in my system.
 
Boopme kindly walked me through the DDS process and I'm posting the logs
I did post on another help site before knowing the rule of no posting elsewhere.  I closed that thread, so please do not shut this down.
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64 
Internet Explorer: 11.0.9600.17126
Run by Valued Customer at 20:40:49 on 2014-06-27
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.1.1033.18.8147.5962 [GMT -4:00]
.
AV: avast! Antivirus *Enabled/Updated* {17AD7D40-BA12-9C46-7131... Read more

A:spyware scanner found unwanted programs not listed in programs and features II

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/539247 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

Read other 10 answers
RELEVANCY SCORE 45.2

I'm running Windows 7 and a few months back had to remove Snap.do and some other unwanted programs.  I managed to get them off, I beleive.  I'm not sure, but I beleive I had to delete some folders to get them off fully. Subsequent Superantispyware runs did not report any unwanted programs.
This morning Avast alerted me Snap.do was back.  I opened a browser and confirmed the home page was hijacked.  Avast said it could remove it for me and when I looked, the home page was back and Snap.do wasn't on my list of programs in control panel>prorams and features.
I ran malware bytes and nothing too bad was found.  I ran Superantispyware and it reported regcleaner pro, Advanced Sysrem Protector and AppsHat Mobile Apps were installed.  I let the Super antispyware try to remove them and also cleaned out some tracking cookies.  I cehcked programs and the 3 weren't there.  Re-running Super antispyware however keeps reporting they're in my system.
Any ideas?  Was my original removal not successful?  Can these apps hide?

A:spyware scanner found unwanted programs not listed in programs and features

Hello Splungee, this one is a bit tricky.Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members.

Read other 5 answers
RELEVANCY SCORE 45.2

My computer has a serious spyware problem.
It mostly seems to be centre around I.E. (3 annoying pop-ups on every page, strange seach bar beneath the top panel, etc.) but I do occasionaly get icons appearing on the desktop. can anyone help? I've included a hijack this log in case you need it.
thanks a lot
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Java\j2re1.4.2_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-gb\msnappau.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\sys... Read more

A:Solved: spyware even after running several anti-spyware programs repeatedly

Read other 10 answers
RELEVANCY SCORE 44.8

here is my log

Logfile of HijackThis v1.99.1
Scan saved at 1:19:57 PM, on 11/26/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\system32\LxrJD31s.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\msvcmm32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFree.exe
C:\PROGRA~1\MOVIEL~1\MOVIEL~1\MOVIEL~1.EXE
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft Broadband Networking\MSBNTray.exe
C:\Documents and ... Read more

A:alot of my programs "encounter errors and need to close"

bump
 

Read other 1 answers
RELEVANCY SCORE 44.8

I just went though an extremely long and time consuming process of getting my computer operational again. I was infected by malicious programs while running various anti-spyware programs like Spyware Doctor, and Spyware Search & Destroy. I have since then installed even more programs like Ad-Aware and Malewarebytes. Each one has been able to remove spyware or programs the others could not. Anyway at some point my antispyware programs failed me and I got infected. I also had Norton at some point but that was useless as well.

Anyway the problem that worries me right now is that most of my anti-spyware can not update. Only Ad-Aware seems to have updated. The rest are getting blocked by something or they say that I do not have an internet connection yet here I am typing away. When I do searches for spyware or viruses the links I click on give me a page cannot be found error. It is like I have a censor on. I managed to download AVAST but I can not install it as it needs to download some files and it is being stopped by something.

During startup I get a memory can not be read error on HDThemeEnabler. Other programs like Realtek Audio have to be terminated when I first see the desktop appear. One program that seem critical called services.exe has to be terminated with status code 1073741819.

Also when ever I remove the spyware on my computer and every single spyware program comes up clean I will get spyware getting downloaded or turning on during startup. When I open ta... Read more

A:Problems with spyware and can not update virus/spyware programs.

Hello and welcome to TSF.

Please read the instructions very carefully and carry them out exactly as they are presented.

Download Combofix from here and save it to your desktop.
Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
Double click on ComboFix.exe & follow the prompts. Combofix will try to update. It's very important that you do NOT allow it to update. Please click on No if it requests an update.
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:



Click on Yes, to continue scanning for malware.

# Your deskt... Read more

Read other 12 answers
RELEVANCY SCORE 44.8

I had an issue that I have never seen before. Something was not allowing me to connect to any threads that mentioned spyware, nor run Hijackthis, nor visit anti-spyware sites.

I ran Vundo and it removed nlrtdolfffit.dll and vhqpeuvjgfbf.dll
I ran ComboFix and it deleted:

C:\WINDOWS\system32\bszip.dll
C:\WINDOWS\system32\d3acdb.dll
C:\WINDOWS\system32\sysdrv7.exe

I then was able to run Hijackthis and found my.way.com search assistant, removed that through add/remove programs

I ran Hijackthis again and got the below results:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:18:58 PM, on 7/30/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Firewall\ca.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust Anti-Spam\QSP-2.1.215.5\QOELoader.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Creative\Sound Blaster Live! 24-bit\Surround Mixer\CTSysVol.exe
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolba... Read more

A:I think I am clean: spyware wouldnt let anti spyware programs run

Read other 8 answers
RELEVANCY SCORE 44.4

Does any one know how I can delete programs in add and remove programs when there is no size given to the right of that program, and because of that I can't uninstall it ! How can I delete these without redownloading them ? Because there are many that I can't redownload ?
 

A:Removing Programs in Add & Remove Programs?

Read other 11 answers
RELEVANCY SCORE 43.6

I am a beginner at this. I used Hijack This and came out with a few things that were suspicious. Gopher Prefix., ::1, and a bunch of others. I am frusterated the computer boots slow and then normal. First it was the WMI provider. Now Ad-adware will not open. Also spyware blaster. Please can someone help me.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:33:08 PM, on 3/4/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\sttray.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe... Read more

A:HELP my programs + anti-spyware programs are shutting off

Welcome to TSG shizzawn2008,

Gotta be careful using HijackThis for anything unless it is in conjunction with guided assistance like this forum offers. It provides details and accesses not normally seen, such as you trying to guess legit things are suspect (the "Gopher" reference is just a type of IE setting for a specific type of access). There is no infection showing here, and maybe just issues with the wrong security setup overall. See here for steps to disable SpyBot's TeaTimer, as it may be something interfering with other softwares there. But a good idea if you have Vista questions is to post on them in the TSG Vista forum itself.
 

Read other 3 answers
RELEVANCY SCORE 43.6

I had a virus that gave the appearance that I was being attached. It looked pretty convincing. I searched the site and downloaded Spyware Dr. I completed the scan and found something to be removed. I removed the infections, however, now I am unable to get into any programs. When I open anything I get an error that indicates that the file can't be open because it needs to know what program to use. No matter what I select it does not allow the program to open. The only way that I got into the internet is because I used use the web service to find the correct program.

I am unable to open any of the commands and can't even run combofix. I see that the downloaded file is on my PC, however, I get the same error as above when I click on ComboFix.exe.

Does anyone have any suggestions.

A:Removed Spyware using Spyware DR now I can't open any programs

Hi Brad Please see the Blue text above this forum and do not run ComboFix on your own.Do this for the file issue.Go here to Doug KNox's Windows? XP File Association FixesRun 9th down on left... EXE File Association Fix ... the EXE not EML one.Now let's see if we are clean.Please download TFC by Old Timer and save it to your desktop. alternate download linkSave any unsaved work. TFC will close ALL open programs including your browser! Double-click on TFC.exe to run it. If you are using Vista, right-click on the file and choose Run As Administrator. Click the Start button to begin the cleaning process and let it run uninterrupted to completion. Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware (v1.44) and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settin... Read more

Read other 3 answers
RELEVANCY SCORE 43.6

Hello!

In the last week I've installed a few programs onto my computer.Ad-Aware SE personal,SpywareBlaster and Sygate's Personal firewall.All were free "shareware".After installation of these programs,I have begun to have many more pop-ups than ever before!Also,my browser now is acting kinda of strange.It doesn't load pages in a smooth way like before.It's very jumpy.I am using Mozilla Firefox as a browser.I never had pop-ups before I installed these programs.This leads me to believe that one or more of the Anti-Spyware programs is really spyware or a Trojan Horse.I had been using Spybot Search and Destroy and X-Cleaner as well as Norton-Antivirus previous to the installations listed above and everything was fine.I have checked the security log of the Sygate personal firewall.The description field of the security log says this:

Application Hijacking has been detected
The application: C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe try to launch another application: C:\Program Files\SpywareBlaster\spywareblaster.exe to go to remote host www.spywareblaster.net
Can someone please give me some advice as to what to do about this?

A:Can Anti Spyware programs have Trojans/Spyware?

Hi ... Take a look at this website it will help you understand which are the good ones and not so good , It also matter from which website you download programs from , not just the program itself http://www.spywarewarrior.com/rogue_anti-spyware.htm

Read other 2 answers
RELEVANCY SCORE 42

Well I uninstalled a bunch of old programs from my computer and went out, and then my brother got on and somehow he got a program called spydawn of which I had no idea how to remove so I did a system restore to the previous week.

The programs I uninstalled came back onto my computer but they have no uninstallers and I can't remove them now.

Is there any way to remove them?

A:Removing Programs

Hi Homakruz and Welcome to Bleeping Computer.Please follow the instructions in this guide on How to Remove Spydawn.Then you should be able to uninstall the old programs again.

Read other 8 answers
RELEVANCY SCORE 42

How can I remove old programs that won't uninstall using the control panel add/remove programs

Thanks
Windows xp home
 

A:Removing old programs

Welcome to TSG

Try MyUninstaller: http://www.nirsoft.net/utils/myuninst.html
 

Read other 1 answers
RELEVANCY SCORE 42

I need to remove a program from my computer but I don't have the uninstall .exe on my computer, and it freezes when I go to Add/Remove Programs in the CP.

Help?

A:Removing programs?

Quote:





Originally Posted by Dewprisms


I need to remove a program from my computer but I don't have the uninstall .exe on my computer, and it freezes when I go to Add/Remove Programs in the CP.

Help?





See if this will help you http://www.theeldergeek.com/delete_undeletable_file.htm.

Read other 1 answers
RELEVANCY SCORE 42

I have a Dell inspiron 1525 vista 64-bit and I would like to know what programs I can safely remove from my programs. A little help would be so much appreciated. Thank you

A:removing programs

As in bundled bloatware Dell junk programs? all of them except for drivers of any sort.

Read other 3 answers
RELEVANCY SCORE 42

hello
can you remove programs like windows... on one administrator but not from the computer so it doesn't remove programs from an other administrator on the same computer?

thanks

A:removing programs

I have no idea what you are asking? Why would you want to remove Windows?

Read other 4 answers
RELEVANCY SCORE 42

PLEASE HELP.

I keep getting an error message when trying to uninstall programs.

"The Windows installer service could not be accessed. This can occur if you are running in safe mode, or if Windows installer is not correctly installed."

btw- I am not running in safe mode

A:PLEASE HELP me with Removing Programs

Possibly pertinent, http://support.microsoft.com/kb/315353.I would also try to download/install Windows Installer 4.5 - http://www.microsoft.com/downloads/details...b9-54d056d6f9f4.Louis

Read other 1 answers