hijackthis log

ok, first, i've run the regedit, and NO SIGN of spacdude or error:water…

there's a nice marijuana leaf and a writing that says "spac", and an email address: [removed].

Can you Right Click on them and select delete?



Lets look at what's in the startup.

click Start> Run> type in Msconfig tap enter key.
look in the Startup. See if they are in there.

and here's the startup list. ALL strins are checked: USB Storage RW* — "C:\Programmi\USB Storage RW\showicon.exe" -t"KYE\USB Storage RW" hpsysdrv — c:\windows\system\hpsysdrv.exe hkcmd — C:\WINDOWS\System32\hkcmd.exe rundll32 — rundll32.exe smctrl.dll, TaskBar ashDisp — C:\PROGRA-1\ALWILS-1\Avast4\ashDisp.exe CTSysVol — C:\Programmi\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe CTDVDDet — C:\Programmi\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.exe SBDrvDet — C:\Programmi\Creative\SB Drive Det\SBDrvDet.exe /r smc — C:\PROGRA-1\Sygate\SPF\smc.exe -startgui NeroCheck — C:\WINDOWS\System32\NeroCheck.exe CTHELPER — CTHELPER.EXE KBD — C:\HP\KBD\KBD.EXE RECGUARD — C:\WINDOWS\SMINST\RECGUARD.EXE iTouch — C:\Programmi\Logitech\iTouch\iTouch.exe NvCpl — RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartUp wwDisp — C:\Programmi\Webroot\Washer\wwDisp.exe CTMCSMGo — C:\Programmi\Creative\MediaSource\Go\CTMCSMGo /SCB Logitec SetPoint — C:\PROGRA-1\Logitech\SetPoint\KEM.exe SpywareGuard — C:\PROGRA-1\SPYWAR-1\sgmain.exe

no, can't right-click on the pic ot the writing. i tried cause i wanted to post the actual thing here.

Uncheck this one in Startup. rundll32 — rundll32.exe smctrl.dll, TaskBar

done! i unchecked rundll32 — rundll32.exe smctrl.dll, TaskBar i restarted the computer, it went into diagnostic. i restarted it after putting it in normal mode, and bang! blue screen! you know the one that scares the sh.. out of you saying that "a terrible error has occurred. if it is the first time, just restart, but if it has already happened, start worrying"? yeah, that one. now all is fine, but i've had that blue screen coming up every now and then, and i don't know why!

Did unchecking that one do any good?
I couldn't find any information on the file smctrl.dll.

That blue screen of death can be about anything.


We can try some other things and see if we can find something.

Download this program.

http://downloads.subratam.org/DllCompare.exe

Open the program and click the "Run Locate.com" button.
Then click the "Compare" button (this will take a few minutes)
When it finishes click the "Make Log…." button.

Post the dll compare log to this thread.

* DLLCompare Log version(1.0.0.127) Files Found that Windows does not See or cannot Access *Not everything listed here means you are infected! ________________________________________________ O^E says: "There were no files found " ________________________________________________ 1.504 items found: 1.504 files, 0 directories. Total of file sizes: 337.181.974 bytes 321,56 M Administrator Account = True ——————–End log———————

Go here and run at least one of the online scans, allow them to delete whatever they find:

TrendMicro HouseCall
eTrust AntiVirus Web Scanner
Panda ActiveScan
Note any thing that can't be fixed
Reboot when done.

just tried panda, avast came up with virus threat. aborted connection. will let you know

Could be something.

and etrust tells me this: Control failed to load. Are you using Internet Explorer 4.0 or above? mmm… nice, eh?

trendmicro is running now. it'll take some time, so possibly i'll get back with you tomorrow (it's 2.15am here) thanks again for all the trouble you're undertaking ale

I posted this thing all over and haven't heard back from anyone yet. Might be a new bad guy. So I'll stay with you until we get it Nite

hey, i'm back! trendmicro finisched scanning local hard drives. and found nothing! now i'm scaning with etrust (a little problem with activex, now settled) panda still gives me that virus problem, avast tells me that it found traces of Win32:Kuang2 in the software that you have to download in order to have your pc scanned. i'll let you know if etrust finds anything out of the ordinary