Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
This topic is locked
This is a Windows 98 machine with some serious spyware problems. Thank you in advance for your help.
***************************************************************************************
Logfile of HijackThis v1.99.1
Scan saved at 4:26:43 PM, on 2/4/06
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\WEBSCANX.EXE
C:\WINDOWS\SYSTEM\OUTPOSTUPDATE.EXE
C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE VIRUSSCAN\VSSTAT.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\NETASSISTANT\SMARTBRIDGE\MOTIVESB.EXE
C:\WINDOWS\BP_BG.EXE
C:\PROGRAM FILES\CYBERLINK\POWERDVD\PDVDSERV.EXE
C:\PROGRAM FILES\COMMON FILES\SONIC\UPDATE MANAGER\SGTRAY.EXE
C:\WINDOWS\RUNDLL32.EXE
C:\PROGRAM FILES\NETASSISTANT\BIN\MPBTN.EXE
C:\PROGRAM FILES\SYMPATICO\ACCESS MANAGER\APP\ENTERNET.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\PROGRAM FILES\WINZIP\WINZIP32.EXE
C:\MY DOCUMENTS\HIJACKTHIS.EXE
R1 HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
res://c:\windows\TEMP\se.dll/space.html
R1 HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.sympatico.ca
R1 HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
res://c:\windows\TEMP\se.dll/space.html
R1 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R1 HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
about:blank
R0 HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
about:blank
R1 HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
R1 HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft
Internet Explorer provided by Sympatico Internet Service
R1 HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = ;127.0.0.1;<local>
O2 BHO: AcroIEHlprObj Class {06849E9FC8D74D59B87D784B7D6BE0B3}C:\PROGRAM
FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 BHO: (no name)
{34EC0FE109B411DA8B1B00A024C93BDD}C:\WINDOWS\SYSTEM\JCEM.DLL
O3 Toolbar: MapQuest
{4E7BD74F2B8D469EA3FAF363B384B77D}C:\WINDOWS\DOWNLO~1\MQGOLD1.DLL
O3 Toolbar: &Radio
{8E718888423F11D2876E00A0C9082467}C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 HKLM\..\Run: [SystemTray] SysTray.Exe
O4 HKLM\..\Run: [LoadPowerProfile] Rundll32.exe
powrprof.dll,LoadCurrentPwrScheme
O4 HKLM\..\Run: [McAfeeWebScanX] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE
VIRUSSCAN\WebScanX.Exe
O4 HKLM\..\Run: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK ASSOCIATES\MCAFEE
VIRUSSCAN\VSHWIN32.EXE
O4 HKLM\..\Run: [LoadQM] loadqm.exe
O4 HKLM\..\Run: [Motive SmartBridge]
C:\PROGRA~1\NETASS~1\SMARTB~1\MotiveSB.exe
O4 HKLM\..\Run: [CY_BG] C:\WINDOWS\BP_BG.EXE
O4 HKLM\..\Run: [RemoteControl] "C:\Program
Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 HKLM\..\Run: [UpdateManager] "c:\Program Files\Common Files\Sonic\Update
Manager\sgtray.exe" /r
O4 HKLM\..\Run: [outpostupdate] C:\WINDOWS\SYSTEM\outpostupdate.exe
O4 HKLM\..\Run: [sp] rundll32 C:\WINDOWS\TEMP\SE.DLL,DllInstall
O4 HKLM\..\RunServices: [Vshwin32EXE] C:\PROGRAM FILES\NETWORK
ASSOCIATES\MCAFEE VIRUSSCAN\VSHWIN32.EXE
O4 HKLM\..\RunServices: [McAfeeWebScanX] C:\PROGRAM FILES\NETWORK
ASSOCIATES\MCAFEE VIRUSSCAN\WebScanX.Exe /RUNSERVICES
O4 HKLM\..\RunServices: [outpostupdate] C:\WINDOWS\SYSTEM\outpostupdate.exe
O4 HKCU\..\Run: [MsnMsgr] "c:\Program Files\MSN Messenger\MsnMsgr.Exe"
/background
O4 HKCU\..\Run: [outpostupdate] C:\WINDOWS\SYSTEM\outpostupdate.exe
O4 HKCU\..\RunServices: [MsnMsgr] "c:\Program Files\MSN
Messenger\MsnMsgr.Exe" /background
O4 HKCU\..\RunServices: [outpostupdate] C:\WINDOWS\SYSTEM\outpostupdate.exe
O4 Startup: NetAssistant.lnk = C:\Program Files\NetAssistant\bin\matcli.exe
O4 Startup: PowerReg Scheduler V3.exe
O9 Extra button: Microsoft AntiSpyware helper
{3BB175E009B411DA8B1B00A0CC23015A}C:\WINDOWS\SYSTEM\WLDR.DLL
O9 Extra 'Tools' menuitem: Microsoft AntiSpyware helper
{3BB175E009B411DA8B1B00A0CC23015A}C:\WINDOWS\SYSTEM\WLDR.DLL
O9 Extra button: Microsoft AntiSpyware helper
{3BB175E009B411DA8B1B00A0CC23015A}C:\WINDOWS\SYSTEM\WLDR.DLL (HKCU)
O9 Extra 'Tools' menuitem: Microsoft AntiSpyware helper
{3BB175E009B411DA8B1B00A0CC23015A}C:\WINDOWS\SYSTEM\WLDR.DLL (HKCU)
O12 Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O12 Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 Plugin for .wav: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O14 IERESET.INF: START_PAGE_URL=http://www.sympatico.ca
O16 DPF: {03F998B20E0011D3A49800104B6EB52E}(MetaStreamCtl Class)
https://components.v...w.viewpoint.com
O16 DPF: {4E7BD74F2B8D469EA3FAF363B384B77D}(MapQuest)
http://cdn.mapquest....bar/mqgold1.cab
O18 Filter: text/html
{7B08D7E07C6111DA8B1B00A09C6A8D3C}C:\WINDOWS\SYSTEM\JCEM.DLL
O18 Filter: text/plain
{7B08D7E07C6111DA8B1B00A09C6A8D3C}C:\WINDOWS\SYSTEM\JCEM.DLL
***************************************************************************************
Thanks again!!
