Answers to your tech questions
Computer forums for help with removing malicious software (malware) and improving computer security

Welcome Guest to What the Tech! ( Log In | Register ) We specialize in the removal of malicious software (malware), but here you'll find free help and support for all your tech questions. We invite you to ask questions, share experiences, and learn. Explore our message boards, or register now to post messages of your own. Please Start Here. Register today (registration removes advertising)

 
Closed TopicStart new topic
> Huge Spyware Prob On Comp Please Help Urgently!, please review my HijackThis Log
onesikgypo
post Oct 22 2004, 11:41 PM
Post #1


New Member
*

Group: New Member
Posts: 1
Joined: 22-October 04
Member No.: 17,080



Hello, and thankyou in advance

Im having a lot of trouble on this computer with spyware, expecially with elitum elite bar, but i am also having many other troubles, i keep getting spyware on my computer for no reason, and in addition when i start up my computer i ALWAYS get these 2 disgusting (porn) popups and no matter what i do, it cannot be fixed, ive run both adaware and spybot S&D both updated and both using the steps provided at this site --> http://www.wilderssecurity.com/showthread.php?t=15913

I am using Trend Micro Antivirus software

im going to post my hijack this log now, and i hope that you guys can fix my comp:

P.S PLEASE NOTE THIS IS MY FIRST TIME USING HIJACKTHIS IN A LONG TIME AND I DID NOT CHANGE ANY SETTINGS, I DOWNLOADED IT, THEN MADE THE LOG, SO IF THERES ANYTHING ELSE I MUST DO PLEASE TELL ME

Logfile of HijackThis v1.98.2
Scan saved at 3:17:20 PM, on 23/10/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Trend Micro\Internet Security\Tmntsrv.exe
C:\Program Files\Trend Micro\Internet Security\tmproxy.exe
C:\Program Files\Trend Micro\Internet Security\PccPfw.exe
C:\WINDOWS\System32\svchosets.exe
C:\Program Files\Nokia\PC Suite for Nokia 6600\connmngmntbox.exe
c:\windows\system32\qpalsp\palsp.exe
C:\Program Files\Nokia\PC Suite for Nokia 6600\ectaskscheduler.exe
C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntim e.exe
C:\PROGRA~1\Nokia\PCSUIT~1\Elogerr.exe
C:\PROGRA~1\Nokia\PCSUIT~1\BROADC~1.EXE
c:\windows\system32\qpalsp\wshield.exe
C:\PROGRA~1\Nokia\PCSUIT~1\SCRFS.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\explorer.exe
c:\windows\system32\qpalsp\alte.exe
c:\windows\system32\qpalsp\alte.exe
c:\windows\system32\qpalsp\alte.exe
c:\windows\system32\qpalsp\alte.exe
C:\Documents and Settings\Matthew\My Documents\hijackhis2\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRA~1\Toolbar\toolbar.dll/sa
R3 - Default URLSearchHook is missing
O2 - BHO: &EliteBar - {28CAEFF3-0F18-4036-B504-51D73BD81ABC} - C:\WINDOWS\EliteToolBar\EliteToolBar version 53.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &EliteBar - {825CF5BD-8862-4430-B771-0C15C5CA8DEF} - C:\WINDOWS\EliteToolBar\EliteToolBar version 53.dll (file missing)
O4 - HKLM\..\Run: [Start It Upping] svchosets.exe
O4 - HKLM\..\Run: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - HKLM\..\RunServices: [ati control panel] atiphexx.exe
O4 - HKLM\..\RunServices: [Start It Upping] svchosets.exe
O4 - HKLM\..\RunServices: [Microsoft WinUpdate] syswin32.exe
O4 - HKLM\..\RunServices: [dfix] dxet.exe
O4 - HKLM\..\RunServices: [SP2 data] c:\windows\system32\winstat\repcale.exe c:\windows\system32\winstat\apc.exe
O4 - HKLM\..\RunServices: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - HKCU\..\Run: [Start It Upping] svchosets.exe
O4 - HKCU\..\Run: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - HKCU\..\RunServices: [dfix] dxet.exe
O4 - HKCU\..\RunServices: [SP2 data] c:\windows\system32\winstat\repcale.exe c:\windows\system32\winstat\apc.exe
O4 - HKCU\..\RunServices: [Installs SP2] c:\windows\system32\qpalsp\repcale.exe c:\windows\system32\qpalsp\palsp.exe
O4 - Startup: NextOffice 8.2.lnk = C:\Program Files\NextOffice8.2\program\quickstart.exe
O4 - Global Startup: PCSuiteForNokia6600 Detect.lnk = ?
O4 - Global Startup: PCSuiteForNokia6600 TS.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} (CR64Loader Object) - http://www.miniclip.com/platypus/miniclipGameLoader.dll
O16 - DPF: {771A1334-6B08-4A6B-AEDC-CF994BA2CEBE} (Installer Class) - http://www.ysbweb.com/ist/softwares...ysb_regular.cab
O21 - SSODL: SysTray - {E61B5E20-DE35-11CF-9C87-1579005127ED} - C:\WINDOWS\System32\msc.cpl

Please not a Adaware SE Personal and Spybot S&D log is available upon request
Go to the top of the page
 
+Quote Post
daveai
post Oct 29 2004, 05:29 PM
Post #2


Classroom Teacher
Group Icon

Group: Malware Expert
Posts: 1,280
Joined: 7-August 04
Member No.: 12,002
Operating System: Windows XP-Pro, etc. etc.



Thanks for sending your HijackThis logfile. We apologize for the delay in responding. The volunteers working here are swamped, and unfortunately some requests don't get answered in a timely manner.

If you still need some help with your problem, please respond to this thread with a fresh HijackThis log.

I will be notified automatically when that happens.

Thanks
daveai
Go to the top of the page
 
+Quote Post
little eagle
post Oct 31 2004, 08:49 PM
Post #3


spyware hawk
Group Icon

Group: Classroom Teacher
Posts: 8,946
Joined: 20-March 04
From: sky
Member No.: 3,163
Operating System: XP & 2000




Posting in two different forums is a waste of time for all.
And slows the response time for all
http://spywarewarrior.com/viewtopic.php?t=6980
Go to the top of the page
 
+Quote Post

Closed TopicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 


RSS Time is now: 8th January 2009 - 11:33 PM
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
Member site: Alliance of Security Analysis Professionals | UNITE Against Malware
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy