#1
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
DMVlite & People On Page
Hi all,Ad -Aware. I cannot get these programs off. I get pop-ups all the time, even when not on-line. I ran hijackthis and below is my log:SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)http://www.dell4me.com/myway http://www.optonline.net/Home http://red.clientapps.yahoo.com/cust.../www.yahoo.com http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)http://ak.imgfarm.com/images/nocache...p1.0.0.8-2.cab http://appldnld.m7z.net/content.info...TunesSetup.exe http://by101fd.bay101.hotmail.msn.co...s/MsnPUpld.cab http://chat.msn.com/bin/msnchat45.cab MS -DOS Emulation - C:\WINDOWS\system32\guard.tmp (file missing)PLEASE HELP!!!
Didn't find the information you thought to find?Similar Threads
#2
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Welcome to WindowsBBS melissa1975 L2mfix http://www.downloads.subratam.org/l2mfix.exe l2mfix.exe . Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so!
#3
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
Thanks for the quick reply and the welcome. Here is the log from l2mfix...MS -DOS Emulation]
#4
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Is that the entire log?
#5
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
I ran it again. Here it is in 2 parts:MS -DOS Emulation]FTP Folders Webview"
#6
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
Part 2...
Files Found are not all bad files:
#7
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Thank you. Close any programs you have open since this step requires a reboot.IMPORTANT: Do NOT run any other files in the l2mfix folder until you are asked to do so!
#8
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
new l2mfix log part 1
L2Mfix 1.03http://www.heysoft.de )http://www.heysoft.de )http://www.heysoft.de )Craig.Peacock@beyondlogic.org Craig.Peacock@beyondlogic.org
#9
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
new l2mfix log part 2
Zipping up files for submission:http://www.heysoft.de )http://www.heysoft.de )MS -DOS Emulation]
#10
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
hijack this - new log
Logfile of HijackThis v1.99.1SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)http://www.dell4me.com/myway http://www.optonline.net/Home http://red.clientapps.yahoo.com/cust.../www.yahoo.com http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)http://ak.imgfarm.com/images/nocache...p1.0.0.8-2.cab http://appldnld.m7z.net/content.info...TunesSetup.exe http://by101fd.bay101.hotmail.msn.co...s/MsnPUpld.cab http://chat.msn.com/bin/msnchat45.cab MS -DOS Emulation - C:\WINDOWS\system32\guard.tmp (file missing)
#11
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
You should print this out and save it to text where you can access it in safe mode. Saving to text allows for copy/pasting. Printing it will hightlight the files/folders I have colored red for deletion. It's very important to follow the instructions completely, and in the order given.Ad -aware.http://www.dell4me.com/myway <<< fix if you don't want as your homepage http://www.optonline.net/Home <<< fix if you don't want as your homepage http://red.clientapps.yahoo.com/cus...//www.yahoo.com INCRED~1 \BHO\INCFIN~1.DLL (file missing) Incredifind....might be another in a subfolder of C: CxtPls \cxtpls.dllOptimumOnline \insptbar.dll Dogpile toolbar and still listed as a pest with Pest Patrol.......your call, as it's still in debate with other experts around the net CSBB \CSv10P070.exeexplore1.exe eudhzc.exe nviwgc.exe VBouncer \VirtualBouncer.exewsxsvc \wsxsvc.exevmss \vmss.exefarmmext.exe stlb2_dist36.exe SearchUpgrader \SearchUpgrader.exeAutoUpdate \AutoUpdate.exe"??plorer.exe dpnwsock.exe osoa.exe Infospace \OptimumOnline\contextsearch.htm <<< Dogpile Toolbar http://ak.imgfarm.com/images/nocach...up1.0.0.8-2.cab MS -DOS Emulation - C:\WINDOWS\system32\guard.tmp (file missing)msconfig , hit enter. On the boot.ini tab, check the box next to /safeboot and click OK. Click yes to restart. This will restart your computer in safe mode. Logon to your user account.show hidden files and folders , as well as system files and extensions for known file types.utfyys.exe <<< folderincfindbho.dll incfindbho.dll, rsnwgc.exe, gpt_disp.exe zserv.inf Ad -aware and run in full scan mode. Delete all it finds.compress old files and click OK. RAV . If any files are infected, click the report button then copy and paste it here.Sun Java Website and update your JRE. Current is 1.4.2_07regedit /e C:\winlogon.txt "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify"
#12
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
rav log
Scan started at 4/1/2005 8:16:07 PM
#13
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
hijack this - as of 4/1
Logfile of HijackThis v1.99.1SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)http://www.dell4me.com/myway http://www.optonline.net/Home http://red.clientapps.yahoo.com/cust.../www.yahoo.com http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)http://appldnld.m7z.net/content.info...TunesSetup.exe http://by101fd.bay101.hotmail.msn.co...s/MsnPUpld.cab http://www.ravantivirus.com/scan/ravonline.cab http://chat.msn.com/bin/msnchat45.cab
#14
Member
Profile: Join Date: Mar 2005
Posts: 16
Computer Experience:
Win logon
Windows Registry Editor Version 5.00
#15
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Great! SSK_B5.EXE and folder bundles .aklsp.dll Spybot Version 1.3 from my signature, install and update. Allow it to load SD Helper. Open it up and click mode on the toolbar, then advanced mode. Click immunize in the left pane, then immunize again, this time from above with the green + beside it (always recheck this setting after downloading updates). Click the link below that for SpywareBlaster , download, install, enable all protection and update. Check for updates regularly and watch for any protection being disabled. Then, still in Spybot, click tools button, then IE tweaks and at least lock the HOSTS file.IESpyad.exe , double click to extract (it extracts to C:\IESpyad by default), open the folder, double click the ie-ads.reg file and allow it to merge into the registry.HJT log when done.
All times are GMT +1. The time now is 05:29 .
