system
January 26, 2007, 6:32pm
1
I am new to the Hijackthis program and have been having some problems getting my pc cleaned up ~ I would greatly appreciate any assistance. Thanks
Logfile of HijackThis v1.99.1
Running processes:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html http://red.clientapps.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com http://www.yahoo.com/?.home=ytie http://www.yahoo.com/?.home=ytie http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/*http://www.yahoo.com/ext/search/search.html http://www.yahoo.com/?.home=ytie http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJfox000 Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dllhttp://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst20040510.cab http://www.spybouncer.com/downloader/gdownloader.ocx http://www.bitdefender.com/scan8/oscan8.cab http://download.zonelabs.com/bin/promotions/spywaredetector/WebAAS.cab
DavidR
January 26, 2007, 7:20pm
3
You appear to have two AVs installed or remnants of AVG.
Having two resident scanners installed is not recommended as rather than provide twice the protection it can cause conflicts that could leave you more vulnerable. This could contribute to your problems, I suggest you uninstall AVG since you are seeking assistance on the avast! support forum ;D
I am new to the Hijackthis program and have been having some problems getting my pc cleaned up ~ I would greatly appreciate any assistance. Thanks
What are the problems ?
What is the infected file name/s, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?
Hi enchantedmoon3,
O16 - DPF: {4FA3D392-9349-4D85-8FB9-18733534CFE3} (SpyBouncer.SBDownloader) - http://www.spybouncer.com/downloader/gdownloader.ocx
SpyBouncer is a rogue anti-spyware program (=bad).
http://www.castlecops.com/atxlist-1574.html
Uninstall it from Add/Remove programs and/or run RogueRemover:
http://www.malwarebytes.org/rogueremover.php
If the entry is still there, fix it with HijackThis!
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJfox000
I recommend you remove MyWebSearch:
http://www.pchell.com/support/mywebsearch.shtml
system
February 16, 2007, 4:09pm
5
I have followed the suggestions from before, haven’t found any viruses with the Avast program and the logfile analyer does not show any red/concern issues. My pc does seem to be losing information at odd intervals though. Yahoo security tag disappears, messenger lost my mobile information, AOL IM upgrade disappeared completely… Is this an error from my pc or is something else going on?
Recent Log:
Running processes:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ycomp/defaults/sb/*http://www.yahoo.com/search/ie.html http://red.clientapps.yahoo.com/customize/ycomp/defaults/sp/*http://www.yahoo.com http://www.yahoo.com/?.home=ytie http://www.yahoo.com/?.home=ytie http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/*http://www.yahoo.com/ext/search/search.html http://www.yahoo.com/?.home=ytie http://red.clientapps.yahoo.com/customize/ycomp/defaults/su/*http://www.yahoo.com http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZJfox000 http://www.bitdefender.com/scan8/oscan8.cab http://www.nick.com/common/groove/gx/GrooveAX27.cab
system
February 16, 2007, 7:25pm
6
Other than the rogue/suspect "Spybouncer" program we recommended you uninstall, you do
NOT appear to have any antiSPYWARE/antiTROJAN program(s) on your computer !? I
recommend you install the Good & FREE "AVG Antispyware" from www.ewido.net . After
installation, update its "definition files", then run a "Complete System Scan" . It may be helpful
IF you were to post its "Report" here, so we could see what it found & did !?
system
February 18, 2007, 5:38pm
7
Hey I had a bad virus go through my computer too… >:(… it killed the virus removal tool too.
But Hey at least it is still working Try a wipe out and start from when your computer was just new if you can ok. Good luck
from darian1968
DavidR
February 18, 2007, 6:40pm
8
If these (kernel32.dll, winsock.dll, should there not also be wsock32.dll) are in the system files section, they are back-ups of system files.
This should be on a topic of its own (so as not to hijack the original topic) as it isn’t really the same as the issue here, then we can help you if you need any help.
If it is to offer a format/restore option as a solytion, I think we are no where near the final option of starting from square one.
Hi “Enchanted” :