Author Topic: Help! Malware Bytes, SuperAntispyware and Hijack this logs included (Read 23212 times)

Broni · « **Reply #30 on:** May 03, 2008, 10:30:28 PM »

It may help, if you spank your kids every 100 of checkmarks...
I won't do it for you...

iamtonsoffun247 · « **Reply #31 on:** May 03, 2008, 10:34:32 PM »

lol haha ok....well im not at my gf's house anymore, but Ill do this tomorrow, click "fix checked" and then wait a while for it.....thank you! Ill post a smaller list hopefully lol

Broni · « **Reply #32 on:** May 03, 2008, 10:35:43 PM »

You better....

iamtonsoffun247 · « **Reply #33 on:** May 03, 2008, 10:44:03 PM »

lol I cant help it that she doesnt know how to take care of her computer lol

Broni · « **Reply #34 on:** May 03, 2008, 10:46:04 PM »

Ever heard about teaching?

iamtonsoffun247 · « **Reply #35 on:** May 03, 2008, 10:47:12 PM »

Aye knot knoe of thees teecheng that u talke abott.....

haha all joking aside, i will try it again tomorro and ill post a new log up tomorro.... and once again thank you for all of your help

Broni · « **Reply #36 on:** May 03, 2008, 10:48:21 PM »

Sure thing

iamtonsoffun247 · « **Reply #37 on:** May 04, 2008, 07:13:26 PM »

Ok so since 2:00 today, I have been on the computer trying EVERYTHING to delete the 02 - BHO files, but still have not been able to

im not too sure what to do next.

iamtonsoffun247 · « **Reply #38 on:** May 04, 2008, 08:11:28 PM »

could it possibly be that they were deleted, but they still show up on the hijackthis log?

Broni · « **Reply #39 on:** May 05, 2008, 05:13:12 PM »

No.

Go Start>Run, type in:
regedit
Click OK.

Registry Editor will open.
Navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
You'll see tens of alphanumeric subkeys, which will look like this:
{0032D506-4FE0-DF8E-EB48-201C0AF54F67}
Click on first one, hold SHIFT key, scroll down, and click on the last one, so all of them are highlighted.
Right click on any of them, and click Delete.
OK warning.

Restart computer.
Post new HJT.

iamtonsoffun247 · « **Reply #40 on:** May 05, 2008, 06:34:04 PM »

there is nothing in there....

iamtonsoffun247 · « **Reply #41 on:** May 05, 2008, 06:39:00 PM »

I did somethin else, and here is the new HJT log...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:38:37 PM, on 5/5/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe
C:\Program Files\Lexmark X74-X75\lxbbbmon.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://dslstart.verizon.net
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Lexmark X74-X75] "C:\Program Files\Lexmark X74-X75\lxbbbmgr.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe" /OM
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6.exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [OM2_Monitor] "C:\Program Files\OLYMPUS\OLYMPUS Master 2\MMonitor.exe" -NoStart
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-18\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ALUAlert] C:\Program Files\Symantec\LiveUpdate\ALUNotify.exe (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\AIM95_c1\aim.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\WINDOWS\System32\shdocvw.dll
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5) - http://upload.facebook.com/controls/FacebookPhotoUploader5.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://www.crucial.com/controls/cpcScanner.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 6709 bytes

evilfantasy · « **Reply #42 on:** May 05, 2008, 07:01:43 PM »

Just noticed this.

http://www.computerhope.com/forum/index.php?topic=56395.new;topicseen#new

Broni · « **Reply #43 on:** May 05, 2008, 07:25:32 PM »

iamtonsoffun247
What's going on here?

iamtonsoffun247 · « **Reply #44 on:** May 05, 2008, 07:27:17 PM »

Im sorry, but I didnt see that you were on so I asked for help in a new topic lol check out the other topic and let me kno if there is nething else i need removed... thank you

Computer Hope Forum

News:

Author Topic: Help! Malware Bytes, SuperAntispyware and Hijack this logs included (Read 23212 times)

Broni

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

iamtonsoffun247

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

Broni

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

iamtonsoffun247

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

Broni

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

iamtonsoffun247

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

Broni

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

iamtonsoffun247

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

iamtonsoffun247

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

Broni

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

iamtonsoffun247

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

iamtonsoffun247

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

evilfantasy

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

Broni

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included

iamtonsoffun247

Re: Help! Malware Bytes, SuperAntispyware and Hijack this logs included