What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Can't Get Rid Of Look2me & Vx2 Hijack Log

8 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16

BTW, what is this???

O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX22/download/kdx.cab

you can click on the link. It looks like a site to play / download games.

Log looks good :D :thumbup: How is it running any issues?

Get at least the free Anti-Virus ;)

If you dont have these three programs I would recommend that you get them. Spywareblaster, Spywareguard and IESPY AD. They will add 1000's of sites to your resticted zone and block some hijacks from happening. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.

Safe Surfing. :D

Can I get rid of that gamespot thing with Hijack This!? I don't play games on here as there's not enough RAM nor HD space.

I'll look into those sites you posted ASAP!

Thanks so much! ;)
Post #17

Can I get rid of that gamespot thing with Hijack This!? I don't play games on here as there's not enough RAM nor HD space

Yes, matter of fact, you can get rid of all these.

Run Hijack This again and put a check by these. Close ALL windows and browsers except HijackThis and click "Fix checked"

O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedCon…bin/AvSniff.cab

O16 - DPF: {69DEAF94-AF66-11D3-BEC0-00105AA9B6AE} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC…n/bin/cabsa.cab

O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab

O16 - DPF: {90C9629E-CD32-11D3-BBFB-00105A1F0D68} (InstallShield International Setup Player) - http://www.installengine.com/engine/isetup.cab

O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/…410/mcfscan.cab

O16 - DPF: {F54C1137-5E34-4B95-95A5-BA56D4D8D743} (Secure Delivery) - http://www.gamespot.com/KDX22/download/kdx.cab

O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/threatinfo/virusinfo/webscan.cab

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
Post #20 last edited
Ye Gods, I thought everything was ok. I went back to a site I moderate and started getting odd popups to scan my computer for viri. Of course, I didn't click oK on the darned things but I did run ad-aware, again and found not only the darned Vx2 and also Look2Me, AGAIN, but also bw.exe and another .exe program that said bundled_ (something). I let ad aware do it's thing and then Spy-Bot, then rechecked and the bw.exe was still there so I manually removed that, rebooted, did another scan and here it is. Check down at the bottom as there are these 3 files I found that I have never seen before, plus some data I could get on them by right clicking them. What the heck are those and should I worry about them as well?? :rant2:

Logfile of HijackThis v1.98.2
Scan saved at 12:36:14 AM, on 12/5/04
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
D:\SPYWARE REMOVAL TOOLS\AD-AWARE\AD-AWARE SE PERSONAL\AD-AWARE.EXE
E:\HIJACKTHIS\HIJACKTHIS.EXE

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [POINTER] point32.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\SYSTEM\Shdocvw.dll
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aol.com/computercheckup/qdiagcc.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.aol.com/molbin/shared/m…75/mcinsctl.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.aol.com/molbin/shared/m…,17/mcgdmgr.cab

—————————————————

NDISWAN.CAT
L = Internet
O = VeriSign, Inc.
OU = NO LIABILITY ACCEPTED, ©97 VeriSign, Inc.
OU = VeriSign Trust Network
OU = VeriSign Time Stamping Service

NET.CAT

WANATW.CAT
Windows Hardware Driver Verification([removed].4.1.311.10.3.5)
Code Signing([removed].[removed].3)
KeyID=BB77 D6CE 04FF F6B2 0F83 15B9 40C2 0461
Certificate Issuer:
CN=Microsoft Root Authority
OU=Microsoft Corporation
OU=Copyright © 1997 Microsoft Corp.
Certificate SerialNumber=198B 11D1 3F9A 8FFE 69A0
Post #21
You remember me suggestioning that you get these? If you don't get the Anti-Virus and Firewall programs you're going to have these problems I highly suggest you get them ALL and they're FREE :thumbup:

The 3 things you listed are the computers catalog. They're fine and needed.


If you dont have these three programs I would recommend that you get them. Spywareblaster, Spywareguard and IESPY AD. They will add 1000's of sites to your resticted zone and block some hijacks from happening. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.

Safe Surfing. :D
Post #22

You remember me suggestioning that you get these? If you don't get the Anti-Virus and Firewall programs you're going to have these problems I highly suggest you get them ALL and they're FREE :thumbup:

The 3 things you listed are the computers catalog. They're fine and needed.


If you dont have these three programs I would recommend that you get them. Spywareblaster, Spywareguard and IESPY AD. They will add 1000's of sites to your resticted zone and block some hijacks from happening. I also have a FREE FIREWALL and FREE ANTI VIRUS if you need one.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.

Safe Surfing. :D

Yes, I do know about the items you mentioned and I do have ZoneAlarm but didn't have it enabled last night because I have so little RAM I can barely move on the net while it's enabled.

My husband had put new RAM in it about a year ago but he got the wrong thing and it was just another newer group of RAM chips but the same size. :rant2: So, now he says he doesn't know how to put in RAM. For Pete's sake, I refuse to take this computer to a shop when he full well knows how to install RAM and I know he can because he's done it several times on his Mac as well. :rant: :lol:

OK, shields are going up, now! I did download Spywareblaster last night (and have not had the chance to execute it due to a hacker who was banned from 3 sites and having to fight with him on our board to keep him off it) and that's when I went into spyware hell. I don't know where that came from but I've been fighting with appwrap.exe, bw.exe and a few others including that bundle_______.exe and a whole barrel full of icons appearing out of nowhere for Expedia, Amazon, eBay, over and over and over and I've never had an occurance of the last 3 before. :::sigh:::

I've been using Ad-aware and Spybot at least once a day if not more for the past 2 weeks. Believe it or not, I had to use them 7 times, each, last night. Hopefully, while I am downloading the rest of them, nothing else will happen!! I still have to moderate that board!! :blink:

And thanks SO MUCH for all your help and patience!!! ;)
Post #24
Due to inactivity this topic will be closed.

To help keep you clean follow the recommendations in Tony's article here:
So how did I get infected in the first place?


If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)

The subject of the email must be "Reopen". Include your post username and details about why you need it reopened, with a valid link to your post.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI