Content Top
DAL Computer Help » Internet Security Help » Spyware, Adware, Viruses and HijackThis Logs » Spybot won't go away PLEASE HELP??

Recommended Fix

Click here to fix Windows Errors and Optimize Windows Performance

Need Computer Help?
Register Now for FREE

Spybot won't go away PLEASE HELP??

Reply
Thread Tools
Spyware, Adware, Viruses and HijackThis Logs
  #1 (permalink)  
Old 18-06-2004, 12:13 AM
Newbie
D-A-L Newbie
 
Join Date: Jun 2004
Posts: 2
SaitanMar Is a beginner here at D-A-L
Spybot won't go away PLEASE HELP??

Hey,
I need help please about a worm i recently appeared on my computer. My norton Antivirus picked it up and as deleted many many times but it just keeps returning to haunt me.

I have used programs such as Spybot Search + Destroy which i thought destroyed the worm but it suddenly came back next time i used my computer.

I would like some recomemdations on what to use to sort out this problem and would be even gratful for just advice on what to do.

HOW DO I GET RID OF IT AND WHAT SOFTWARE TO USE????

Please help me with this and i will be very grateful for it.

Norton Antivirus just keeps blocking it for now but the message alert on Norton is a real pain when playing Unreal Tournament 2004 and other games.

Thanks in advance PLEASE HELP MEEEEEEE

Saitan Mar
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #2 (permalink)  
Old 18-06-2004, 12:49 AM
Tassie Devil's Avatar
DAL Aussie Contingent
Loyal Contributor
 
Join Date: May 2004
Posts: 1,385
Tassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L teamTassie Devil is a key member in the D-A-L team
Re: Spybot won't go away PLEASE HELP??

You need to download Hijack this, the link is in my signature. Follow instructions and post the log here for someone to go through it with you.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #3 (permalink)  
Old 18-06-2004, 12:58 AM
Junior Member
New Recruit
 
Join Date: Jun 2004
Posts: 26
static_b_n_e Is a beginner here at D-A-L
Re: Spybot won't go away PLEASE HELP??

What worm virus is Norton prompting you it has fixed ?
looks as thou the virus contains a startup file/service which hasn't been deleted !
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #4 (permalink)  
Old 18-06-2004, 09:32 AM
Newbie
D-A-L Newbie
 
Join Date: Jun 2004
Posts: 2
SaitanMar Is a beginner here at D-A-L
Re: Spybot won't go away PLEASE HELP??

Hey,
I got Hijack This and scan and this is what it came up with. So what have i got to do now, go through them or something.

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\STOPzilla!\szntsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\srvss.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\STOPzilla!\Stopzilla.exe
C:\WINDOWS\System32\wuamgrd.exe
C:\WINDOWS\mstasks2.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\blueyonder IST\bin\mpbtn.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Symantec\LiveUpdate\AUpdate.exe
C:\Documents and Settings\user\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://broadband.blueyonder.co.uk/
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\WINDOWS\System32\SZIEBHO.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.1629.0\en-gb\msntb.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AceGain LiveUpdate] C:\Program Files\AceGain\LiveUpdate\LiveUpdate.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NVIDIA Video drivers] video_32D.exe
O4 - HKLM\..\Run: [STOPzilla] "C:\Program Files\STOPzilla!\Stopzilla.exe" /autorun
O4 - HKLM\..\Run: [Microsoft Update] wuamgrd.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [ist service uninstall] C:\WINDOWS\mstasks2.exe /u
O4 - HKLM\..\RunServices: [NVIDIA Video drivers] video_32D.exe
O4 - HKLM\..\RunServices: [Microsoft Update] wuamgrd.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NVIDIA Video drivers] video_32D.exe
O4 - HKCU\..\Run: [Isau] C:\Documents and Settings\user\Application Data\loem.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Microsoft Update] wuamgrd.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: blueyonder Instant Support Tool.lnk = C:\Program Files\blueyonder IST\bin\matcli.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/s...irector/sw.cab
O16 - DPF: {CA034DCC-A580-4333-B52F-15F98C42E04C} (Downloader Class) - http://www.stopzilla.com/_download/A...ler/dwnldr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab

Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
  #5 (permalink)  
Old 23-06-2004, 04:32 AM
Rainbow32's Avatar
Junior Member
New Recruit
 
Join Date: Jun 2004
Posts: 40
Rainbow32 Is a beginner here at D-A-L
Re: Spybot won't go away PLEASE HELP??

Here's Norton's instructions for removing the Spybot worm. Print them and follow every step.
http://securityresponse.symantec.com...ybot.worm.html
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Reply With Quote
Reply


Thread Tools

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
SpyBot tommy2k8 Other Software 11 01-08-2008 12:39 AM
Spybot S&D 1.5 jephree Latest Software and Security Updates 40 04-06-2008 06:37 PM
spybot brain_damage Spyware, Adware, Viruses and HijackThis Logs 1 19-09-2005 10:35 PM
spybot s&d spud Windows XP Help 10 03-10-2004 10:23 PM
help with spybot dianewinch Spyware, Adware, Viruses and HijackThis Logs 13 25-05-2004 08:31 PM


All times are GMT +1. The time now is 05:27 AM.

Bottom Corner