What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] REMOVING "YOUR PRIVACY GUARD

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
THIS your privacy guard is popping up on to the desktop kindly help

:o :huh:

i AM PASTING THE HIJACK OF THIS FILE

:blush: Logfile of HijackThis v1.99.1
Scan saved at 3:52:58 PM,

on 11/13/2007
Platform: Windows XP SP2

(WinNT 5.01.2600)
MSIE: Internet Explorer v6.00

SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\sm

ss.exe
C:\WINDOWS\system32\winl

ogon.exe
C:\WINDOWS\system32\ser

vices.exe
C:\WINDOWS\system32\lsa

ss.exe
C:\WINDOWS\system32\svc

host.exe
C:\WINDOWS\System32\svc

host.exe
C:\Program Files\Alwil

Software\Avast4\aswUpdSv.e

xe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil

Software\Avast4\ashServ.exe
C:\Program

Files\Lavasoft\Ad-Aware

2007\AAWTray.exe
C:\Program Files\Analog

Devices\SoundMAX\SMax4P

NP.exe
C:\Program Files\Analog

Devices\SoundMAX\Smax4.e

xe
C:\WINDOWS\System32\igfx

tray.exe
C:\PROGRA~1\ALWILS~1\A

vast4\ashDisp.exe
C:\Program

Files\Grisoft\AVG

Anti-Spyware 7.5\avgas.exe
C:\Program Files\Spyware

Doctor\swdoctor.exe
C:\WINDOWS\system32\ctf

mon.exe
C:\Program

Files\Google\GoogleToolbar

Notifier\GoogleToolbarNotifie

r.exe
C:\WINDOWS\system32\spo

olsv.exe
C:\Program

Files\Grisoft\AVG

Anti-Spyware 7.5\guard.exe
C:\Program Files\Mozilla

Firefox\firefox.exe
C:\Program

Files\DAP\DAP.EXE
C:\Documents and

Settings\srikrishnan\My

Documents\My Completed

Downloads\RootkitRevealer.

exe
C:\DOCUME~1\SRIKRI~1\L

OCALS~1\Temp\VVXJQ.exe
C:\Program

Files\Hijackthis\HijackThis.ex

e

R1 -

HKLM\Software\Microsoft\Int

ernet

Explorer\Main,Default_Page_

URL =

http://www.yahoo.com/
R1 -

HKLM\Software\Microsoft\Int

ernet Explorer\Main,Search

Bar =

http://us.rd.yahoo.com/custo

mize/ie/defaults/sb/msgr8/*ht

tp://www.yahoo.com/ext/sear

ch/search.html
R0 -

HKCU\Software\Microsoft\Int

ernet Explorer\Main,Local

Page =
R3 - URLSearchHook:

Yahoo! Toolbar -

{EF99BD32-C1FB-11D2-892

F-0090271D4F88} -

C:\Program

Files\Yahoo!\Companion\Inst

alls\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar

Helper -

{02478D38-C3F9-4EFB-9B5

1-7695ECA05670} -

C:\Program

Files\Yahoo!\Companion\Inst

alls\cpn0\yt.dll
O2 - BHO: Adobe PDF

Reader Link Helper -

{06849E9F-C8D7-4D59-B87

D-784B7D6BE0B3} -

C:\Program

Files\Adobe\Acrobat

7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PCTools Site

Guard -

{5C8B2A36-3DB1-42A4-A3C

B-D426709BBFEB} -

C:\PROGRA~1\SPYWAR~1\

tools\iesdsg.dll
O2 - BHO: SSVHelper Class

-

{761497BB-D6F0-462C-B6E

B-D4DAF1D92D43} -

C:\Program

Files\Java\jre1.5.0_06\bin\ss

v.dll
O2 - BHO: Google Toolbar

Helper -

{AA58ED58-01DD-4d91-833

3-CF10577473F7} -

c:\program

files\google\googletoolbar3.dl

l
O2 - BHO: Google Toolbar

Notifier BHO -

{AF69DE43-7D58-4638-B6F

A-CE66B5AD205D} -

C:\Program

Files\Google\GoogleToolbar

Notifier\2.0.301.7164\swg.dll
O2 - BHO: PCTools Browser

Monitor -

{B56A7D7D-6927-48C8-A97

5-17DF180C71AC} -

C:\PROGRA~1\SPYWAR~1\

tools\iesdpb.dll
O2 - BHO: MSVPS System -

{CFF8726A-9262-441C-8163

-C6371E9EDE47} -

C:\WINDOWS\advrepnok.dll
O3 - Toolbar: DAP Bar -

{62999427-33FC-4baf-9C9C-

BCE6BD127F08} -

C:\PROGRA~1\DAP\dapieba

r.dll
O3 - Toolbar: &Google -

{2318C2B1-4965-11d4-9B18

-009027A5CD4F} -

c:\program

files\google\googletoolbar3.dl

l
O3 - Toolbar: The sdrmod -

{16A0662E-AC21-4AD9-89E

8-7495AC5ACE93} -

C:\WINDOWS\sdrmod.dll
O3 - Toolbar: Yahoo!

Toolbar -

{EF99BD32-C1FB-11D2-892

F-0090271D4F88} -

C:\Program

Files\Yahoo!\Companion\Inst

alls\cpn0\yt.dll
O4 - HKLM\..\Run:

[SoundMAXPnP] C:\Program

Files\Analog

Devices\SoundMAX\SMax4P

NP.exe
O4 - HKLM\..\Run:

[SoundMAX] "C:\Program

Files\Analog

Devices\SoundMAX\Smax4.e

xe" /tray
O4 - HKLM\..\Run: [IgfxTray]

C:\WINDOWS\System32\igfx

tray.exe
O4 - HKLM\..\Run: [avast!]

C:\PROGRA~1\ALWILS~1\A

vast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG

Anti-Spyware] "C:\Program

Files\Grisoft\AVG

Anti-Spyware 7.5\avgas.exe"

/minimized
O4 - HKCU\..\Run: [Spyware

Doctor] "C:\Program

Files\Spyware

Doctor\swdoctor.exe" /Q
O4 - HKCU\..\Run:

[ctfmon.exe]

C:\WINDOWS\system32\ctf

mon.exe
O4 - HKCU\..\Run: [swg]

C:\Program

Files\Google\GoogleToolbar

Notifier\GoogleToolbarNotifie

r.exe
O8 - Extra context menu

item: &Clean Traces -

C:\Program

Files\DAP\Privacy

Package\dapcleanerie.htm
O8 - Extra context menu

item: &Download with &DAP

- C:\Program

Files\DAP\dapextie.htm
O8 - Extra context menu

item: Add to &banner block

list - res://C:\Program

Files\MereSurfer 2005

Free\MereSurferF.dll/AddIma

geBanner.html
O8 - Extra context menu

item: Download &all with

DAP - C:\Program

Files\DAP\dapextie2.htm
O8 - Extra context menu

item: E&xport to Microsoft

Excel -

res://C:\PROGRA~1\MICRO

S~2\Office10\EXCEL.EXE/30

00
O9 - Extra button: (no name)

-

{08B0E5C0-4FCB-11CF-AA

A5-00401C608501} -

C:\Program

Files\Java\jre1.5.0_06\bin\ss

v.dll
O9 - Extra 'Tools' menuitem:

Sun Java Console -

{08B0E5C0-4FCB-11CF-AA

A5-00401C608501} -

C:\Program

Files\Java\jre1.5.0_06\bin\ss

v.dll
O9 - Extra button: Spyware

Doctor -

{2D663D1A-8670-49D9-A1A

5-4C56B4E14E84} -

C:\PROGRA~1\SPYWAR~1\

tools\iesdpb.dll
O9 - Extra button: Yahoo!

Messenger -

{E5D12C4E-7B4F-11D3-B5C

9-0050045C3C96} -

C:\PROGRA~1\YAHOO!\ME

SSEN~1\YAHOOM~1.EXE
O9 - Extra 'Tools' menuitem:

Yahoo! Messenger -

{E5D12C4E-7B4F-11D3-B5C

9-0050045C3C96} -

C:\PROGRA~1\YAHOO!\ME

SSEN~1\YAHOOM~1.EXE
O9 - Extra button: Messenger

-

{FB5F1910-F110-11d2-BB9E

-00C04F795683} -

C:\Program

Files\Messenger\msmsgs.ex

e
O9 - Extra 'Tools' menuitem:

Windows Messenger -

{FB5F1910-F110-11d2-BB9E

-00C04F795683} -

C:\Program

Files\Messenger\msmsgs.ex

e
O16 - DPF:

{30528230-99f7-4bb4-88d8-f

a1d4f56a2ab} (YInstStarter

Class) - C:\Program

Files\Yahoo!\Common\yinsth

elper.dll
O17 -

HKLM\System\CCS\Services\

Tcpip\..\{37D8D17C-104A-47

6B-A961-885E1CE7FBAC}:

NameServer =

202.88.152.5,202.88.130.67
O17 -

HKLM\System\CCS\Services\

Tcpip\..\{C97ACE4A-46C5-4

2ED-B5F0-EE71A963E1F4}:

NameServer =

202.88.152.8,202.88.152.6
O20 - Winlogon Notify:

igfxcui -

C:\WINDOWS\SYSTEM32\ig

fxsrvc.dll
O21 - SSODL: hupsrv -

{5D16E212-A0EC-4CF3-A46

C-BE6A4B7DE5CA} -

C:\WINDOWS\hupsrv.dll
O21 - SSODL: msmhost -

{FF643875-9054-4A7B-B0C

F-B69654B78809} -

C:\WINDOWS\msmhost.dll

(file missing)
O23 - Service: Ad-Aware

2007 Service (aawservice) -

Lavasoft AB - C:\Program

Files\Lavasoft\Ad-Aware

2007\aawservice.exe
O23 - Service: avast! iAVS4

Control Service (aswUpdSv)

- ALWIL Software -

C:\Program Files\Alwil

Software\Avast4\aswUpdSv.e

xe
O23 - Service: avast!

Antivirus - ALWIL Software -

C:\Program Files\Alwil

Software\Avast4\ashServ.exe
O23 - Service: AVG

Anti-Spyware Guard -

GRISOFT s.r.o. - C:\Program

Files\Grisoft\AVG

Anti-Spyware 7.5\guard.exe
O23 - Service: VVXJQ -

Sysinternals -

www.sysinternals.com -

C:\DOCUME~1\SRIKRI~1\L

OCALS~1\Temp\VVXJQ.exe
Post #2
Welcome to the forum.

Something has happened to your log as it is incomplete.

Can you repost the log and this time turn off word warp in notepad.


Thanks……MrC

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI