Content Top
DAL Computer Help » Internet Security Help » Spyware, Adware, Viruses and HijackThis Logs » HijackThis & AboutBuster Logs *HELP PLEASE*

Recommended Fix

Click here to fix Windows Errors and Optimize Windows Performance

Need Computer Help?
Register Now for FREE

HijackThis & AboutBuster Logs *HELP PLEASE*

Reply
Thread Tools
Spyware, Adware, Viruses and HijackThis Logs
  #1 (permalink)  
Old 10-02-2005, 06:09 PM
Newbie
D-A-L Newbie
 
Join Date: Feb 2005
Posts: 1
friedtraveler Is a beginner here at D-A-L
HijackThis & AboutBuster Logs *HELP PLEASE*

I seem to have spyware type problems ... homepage search crap, spyware ad pop-ups, other similiar pop-ups and AIM problems. I've run AdAware and Spybot as well as HijackThis and AboutBuster.
Here are the logs:

Logfile of HijackThis v1.99.0
Scan saved at 11:51:16 AM, on 2/10/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\apirp.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\AGRSMMSG.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\mfcdv32.exe
C:\WINDOWS\System32\tibs5.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
C:\Program Files\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Documents and Settings\Clay Kenney\My Documents\HijackThis.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\nyfgc.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\nyfgc.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\nyfgc.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\nyfgc.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\nyfgc.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\nyfgc.dll/sp.html#28129
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\nyfgc.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
R3 - Default URLSearchHook is missing
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.searchalot.com/"); (C:\Documents and Settings\Clay Kenney\Application Data\Mozilla\Profiles\default\rzihjmcz.slt\prefs.j s)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {47B9F729-3189-E35B-F1F5-F72AEA8BA6CB} - C:\WINDOWS\atljh32.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [ZTgServerSwitch] c:\program files\support.com\client\bin\tgcmd.exe /server
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Program Files\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaE ngineMain
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [mfcdv32.exe] C:\WINDOWS\system32\mfcdv32.exe
O4 - HKLM\..\Run: [33.tmp] C:\DOCUME~1\REBECC~1\LOCALS~1\Temp\33.tmp.exe 2 28129
O4 - HKLM\..\Run: [sysir32.exe] C:\WINDOWS\system32\sysir32.exe
O4 - HKLM\..\Run: [42.tmp] C:\DOCUME~1\REBECC~1\LOCALS~1\Temp\42.tmp.exe 0 28129
O4 - HKLM\..\Run: [46.tmp] C:\DOCUME~1\REBECC~1\LOCALS~1\Temp\46.tmp.exe 0 28129
O4 - HKLM\..\Run: [tibs5] C:\WINDOWS\System32\tibs5.exe
O4 - HKLM\..\Run: [ntui.exe] C:\WINDOWS\system32\ntui.exe
O4 - HKLM\..\Run: [42.tmp.exe] C:\DOCUME~1\REBECC~1\LOCALS~1\Temp\42.tmp.exe 0 28129
O4 - HKLM\..\Run: [46.tmp.exe] C:\DOCUME~1\REBECC~1\LOCALS~1\Temp\46.tmp.exe 0 28129
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\launchpd.exe"
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\TV\EXPLBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\PROGRA~1\AIM\aim.exe
O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
O9 - Extra button: (no name) - {629C5DAA-BABC-4d44-983D-97AFF415621C} - file://C:\Program Files\BoxTopsShoppingReminder\System\Temp\boxtopgm ills_script0.htm (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.awmdabest.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.static.topconverting.com
O15 - Trusted Zone: *.05p.com (HKLM)
O15 - Trusted Zone: *.awmdabest.com (HKLM)
O15 - Trusted Zone: *.clickspring.net (HKLM)
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O15 - Trusted Zone: *.mt-download.com (HKLM)
O15 - Trusted Zone: *.my-internet.info (HKLM)
O15 - Trusted Zone: *.scoobidoo.com (HKLM)
O15 - Trusted Zone: *.searchmiracle.com (HKLM)
O15 - Trusted Zone: *.static.topconverting.com (HKLM)
O15 - Trusted IP range: 206.161.125.149
O15 - Trusted IP range: 206.161.124.130 (HKLM)
O16 - DPF: Yahoo! Cribbage - http://download.games.yahoo.com/game...ts/y/it1_x.cab
O16 - DPF: Yahoo! Dice - http://download.games.yahoo.com/game...s/y/dct2_x.cab
O16 - DPF: Yahoo! Literati - http://download.games.yahoo.com/game...ts/y/tt3_x.cab
O16 - DPF: Yahoo! Spades - http://download.games.yahoo.com/game...ts/y/st2_x.cab
O16 - DPF: {084F552D-19EB-4668-9788-984CBC781A8F} (AsyncDownloader Class) - http://survey.otxresearch.com/Preloader.dll
O16 - DPF: {09C6CAC0-936E-40A0-BC26-707480103DC3} (shizmoo Class) - http://www.uproar.com/applets/active...side_web18.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yaho...st20040510.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - http://gamesoduser.comcast.net/classes/exentCtl.ocx
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} - http://www.nick.com/common/groove/gx/GrooveAX25.cab
O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://zone.msn.com/binGame/ZAxRcMgr.cab
O16 - DPF: {A031D222-B496-11D2-9CC8-00105A10AAF6} (WONWebLauncher Class) - http://hoylegames.sierra.com/cab/WON...herControl.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10...o.cab33902.cab
O16 - DPF: {B942A249-D1E7-4C11-98AE-FCB76B08747F} (RealArcadeRdxIE Class) - http://games-dl.real.com/gameconsole...rcadeRdxIE.cab
O16 - DPF: {C02226EB-A5D7-4B1F-BD7E-635E46C2288D} (Toontown Installer ActiveX Control) - http://download.toontown.com/sv1.0.14.47/ttinst.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/.../Installer.exe
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - http://download.games.yahoo.com/game...ploader_v5.cab
O16 - DPF: {E504EE6E-47C6-11D5-B8AB-00D0B78F3D48} (Yahoo! Webcam Viewer Wrapper) - http://chat.yahoo.com/cab/yvwrctl.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/_media/dalaillama/ampx.cab
O16 - DPF: {FF791555-FDAC-43AB-B792-389E4CC0A6E5} (Toontown TestServer Installer ActiveX Control) - http://download.test.toontown.com/sv...st/tt_test.cab
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Driver Helper Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Sony SPTI Service - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe
O23 - Service: VAIO Media Music Server - Sony Corporation - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe
O23 - Service: VAIO Media Music Server (HTTP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe
O23 - Service: VAIO Media Music Server (UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
O23 - Service: VAIO Media Photo Server - Sony Corporation - C:\Program Files\Sony\Photo Server\appsrv\PhotoAppSrv.exe
O23 - Service: VAIO Media Photo Server (HTTP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe
O23 - Service: VAIO Media Photo Server (UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe
O23 - Service: Network Security Service - Unknown - C:\WINDOWS\system32\apirp.exe

-- Scan 1 ---------------------------
About:Buster Version 4.0
Reference List : 23

No ADS found on system
Removed 4 Random Key Entries
Removed! : C:\WINDOWS\acqvp.dat
Removed! : C:\WINDOWS\asuse.dat
Removed! : C:\WINDOWS\atrud.dll
Removed! : C:\WINDOWS\azyrz.dll
Removed! : C:\WINDOWS\bbqrn.dat
Removed! : C:\WINDOWS\brhwy.dll
Removed! : C:\WINDOWS\btisy.dat
Removed! : C:\WINDOWS\cqvpg.dll
Removed! : C:\WINDOWS\dhljx.dll
Removed! : C:\WINDOWS\dmpdz.dll
Removed! : C:\WINDOWS\dzzeh.dll
Removed! : C:\WINDOWS\elrpq.dll
Removed! : C:\WINDOWS\eoczk.dat
Removed! : C:\WINDOWS\eqatf.dat
Removed! : C:\WINDOWS\fvkrh.dat
Removed! : C:\WINDOWS\hcnlr.dll
Removed! : C:\WINDOWS\hvxdw.dll
Removed! : C:\WINDOWS\hzrdh.dll
Removed! : C:\WINDOWS\ivhet.dll
Removed! : C:\WINDOWS\iwcec.dat
Removed! : C:\WINDOWS\jfhpn.dat
Removed! : C:\WINDOWS\jfvbm.dat
Removed! : C:\WINDOWS\jtfhp.dll
Removed! : C:\WINDOWS\kfjdo.dll
Removed! : C:\WINDOWS\kqoow.dll
Removed! : C:\WINDOWS\ktmqw.dat
Removed! : C:\WINDOWS\kyvmn.dat
Removed! : C:\WINDOWS\lluct.dat
Removed! : C:\WINDOWS\mffus.dll
Removed! : C:\WINDOWS\mfugs.dat
Removed! : C:\WINDOWS\mscmi.dat
Removed! : C:\WINDOWS\mvxny.dll
Removed! : C:\WINDOWS\ndrlr.dll
Removed! : C:\WINDOWS\njvfb.dll
Removed! : C:\WINDOWS\nlcuo.dll
Removed! : C:\WINDOWS\noirj.dat
Removed! : C:\WINDOWS\nvpcd.dat
Removed! : C:\WINDOWS\ohjqn.dat
Removed! : C:\WINDOWS\omcfi.dat
Removed! : C:\WINDOWS\oncge.dll
Removed! : C:\WINDOWS\pancs.dat
Removed! : C:\WINDOWS\pific.dat
Removed! : C:\WINDOWS\plhjt.dll
Removed! : C:\WINDOWS\ptmnz.dll
Removed! : C:\WINDOWS\pwsvv.dll
Removed! : C:\WINDOWS\qeanz.dll
Removed! : C:\WINDOWS\qemnk.dll
Removed! : C:\WINDOWS\qmkfj.dll
Removed! : C:\WINDOWS\rbixh.dll
Removed! : C:\WINDOWS\spuyi.dll
Removed! : C:\WINDOWS\tnwev.dll
Removed! : C:\WINDOWS\tsoeb.dll
Removed! : C:\WINDOWS\uatzg.dll
Removed! : C:\WINDOWS\wctcv.dat
Removed! : C:\WINDOWS\wdgfd.dll
Removed! : C:\WINDOWS\xhxhq.dat
Removed! : C:\WINDOWS\xkwgi.dat
Removed! : C:\WINDOWS\xzwht.dll
Removed! : C:\WINDOWS\ydgsc.dll
Removed! : C:\WINDOWS\ydwps.dat
Removed! : C:\WINDOWS\ziwec.dll
Removed! : C:\WINDOWS\zoonq.dll
Removed! : C:\WINDOWS\System32\aiquk.dll
Removed! : C:\WINDOWS\System32\ambkb.dll
Removed! : C:\WINDOWS\System32\brztm.dat
Removed! : C:\WINDOWS\System32\dbbcf.dll
Removed! : C:\WINDOWS\System32\diawv.dll
Removed! : C:\WINDOWS\System32\dtckj.dll
Removed! : C:\WINDOWS\System32\dtglb.dll
Removed! : C:\WINDOWS\System32\dtwma.dll
Removed! : C:\WINDOWS\System32\dwnrj.dll
Removed! : C:\WINDOWS\System32\eeiib.dat
Removed! : C:\WINDOWS\System32\fjyel.dat
Removed! : C:\WINDOWS\System32\fmbjy.dll
Removed! : C:\WINDOWS\System32\fqanq.dll
Removed! : C:\WINDOWS\System32\fuikv.dll
Removed! : C:\WINDOWS\System32\fwhsl.dll
Removed! : C:\WINDOWS\System32\fwvbt.dll
Removed! : C:\WINDOWS\System32\gdsks.dll
Removed! : C:\WINDOWS\System32\grgoj.dll
Removed! : C:\WINDOWS\System32\gtcpl.dat
Removed! : C:\WINDOWS\System32\gtzef.dll
Removed! : C:\WINDOWS\System32\hkyao.dll
Removed! : C:\WINDOWS\System32\hllke.dll
Removed! : C:\WINDOWS\System32\iiklt.dll
Removed! : C:\WINDOWS\System32\iydll.dat
Removed! : C:\WINDOWS\System32\jixlk.dat
Removed! : C:\WINDOWS\System32\kiiqj.dll
Removed! : C:\WINDOWS\System32\kscqy.dat
Removed! : C:\WINDOWS\System32\kygmr.dll
Removed! : C:\WINDOWS\System32\kzghs.dll
Removed! : C:\WINDOWS\System32\loarl.dll
Removed! : C:\WINDOWS\System32\mhveq.dll
Removed! : C:\WINDOWS\System32\mlqqw.dat
Removed! : C:\WINDOWS\System32\nkkvr.dll
Removed! : C:\WINDOWS\System32\ntier.dll
Removed! : C:\WINDOWS\System32\nvzms.dll
Removed! : C:\WINDOWS\System32\nxnhq.dll
Removed! : C:\WINDOWS\System32\ofahn.dat
Removed! : C:\WINDOWS\System32\ohvry.dat
Removed! : C:\WINDOWS\System32\pbwvw.dll
Removed! : C:\WINDOWS\System32\perqd.dll
Removed! : C:\WINDOWS\System32\plqds.dat
Removed! : C:\WINDOWS\System32\pslmb.dat
Removed! : C:\WINDOWS\System32\qelnk.dat
Removed! : C:\WINDOWS\System32\qenvo.dll
Removed! : C:\WINDOWS\System32\qzfyy.dat
Removed! : C:\WINDOWS\System32\rdfjg.dll
Removed! : C:\WINDOWS\System32\reoks.dat
Removed! : C:\WINDOWS\System32\rraua.dll
Removed! : C:\WINDOWS\System32\scwbq.dll
Removed! : C:\WINDOWS\System32\sjvpp.dll
Removed! : C:\WINDOWS\System32\ssosj.dll
Removed! : C:\WINDOWS\System32\stnfy.dat
Removed! : C:\WINDOWS\System32\tejnu.dll
Removed! : C:\WINDOWS\System32\tynxy.dat
Removed! : C:\WINDOWS\System32\ucvai.dll
Removed! : C:\WINDOWS\System32\uhvtp.dat
Removed! : C:\WINDOWS\System32\uifyd.dll
Removed! : C:\WINDOWS\System32\urgxj.dat
Removed! : C:\WINDOWS\System32\uxvug.dll
Removed! : C:\WINDOWS\System32\vehtk.dat
Removed! : C:\WINDOWS\System32\vjvxz.dll
Removed! : C:\WINDOWS\System32\vwqmp.dat
Removed! : C:\WINDOWS\System32\vymjj.dll
Removed! : C:\WINDOWS\System32\whzif.dll
Removed! : C:\WINDOWS\System32\wsspc.dll
Removed! : C:\WINDOWS\System32\xmibr.dat
Removed! : C:\WINDOWS\System32\xzuoz.dat
Removed! : C:\WINDOWS\System32\yaqxi.dll
Removed! : C:\WINDOWS\System32\ypdgu.dll
Removed! : C:\WINDOWS\System32\zcatf.dll
Removed! : C:\WINDOWS\System32\zcnti.dll
Attempted Clean Of Temp folder.
Removed Uninstall Key (HSA)
Removed Uninstall Key (SE)
Removed Uninstall Key (SW)
Pages Reset... Done!

-- Scan 2 ---------------------------
About:Buster Version 4.0
Reference List : 23

No ADS found on system
Attempted Clean Of Temp folder.
Pages Reset... Done!


Any help would be GREATLY appreciated.

Thanks
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 11-02-2005, 11:03 PM
owen's Avatar
D-A-L Team Member (UK)
Loyal Contributor
 
Join Date: Jun 2004
Posts: 5,272
owen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furnitureowen is beginning to become part of the furniture
Re: HijackThis & AboutBuster Logs *HELP PLEASE*

Could you post a fresh log please since the infection may have morphed.
__________________
Owen,
My Website - I Security.org.uk

MALWARE: READ FIRST Procedures:
|_ SpyBot V1.4 _|_ Ad-Aware SE 1.06_|_ HijackThis Log __V1.99.1 _|


[*]Be patient and wait for a response, we'll do our best to help resolve your issue.
[*]When posting for help, start your own thread and stick to it. Don't start multiple threads or post in other peoples threads!

If we have helped you, please consider making a donation to help support the forum. All donations are greatly appreciated. You can also support the forum by placing a link to us on your personal website.

Useful Links:
Posting a Hijack This Log
Preposting and Prevention Info
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Do Not Post HijackThis Logs Here jephree Windows XP Help 0 04-02-2009 10:59 PM
HijackThis logs....(RESOLVED) k-sparky-k Spyware, Adware, Viruses and HijackThis Logs 28 24-05-2006 03:54 AM
Hijackthis logs, comp slowed cc98 Spyware, Adware, Viruses and HijackThis Logs 32 11-08-2004 08:05 PM
Help with reading HijackThis Logs D-A-L Spyware, Adware, Viruses and HijackThis Logs 1 29-05-2004 02:02 PM


All times are GMT +1. The time now is 02:20 PM.

Bottom Corner