HAVING COMPUTER ISSUES...VIRUSES,SPYWARE, ETC...INFO HERE

[mudoloc_650]

HERE IS MY LOG FILE PLZ LET ME KNOW IF YOU CAN HELP

Logfile of HijackThis v1.99.1
Scan saved at 6:16:18 PM, on 8/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\M-Audio\Install\EvoInst.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\etiylhi.exe
C:\WINDOWS\system32\czuehf.exe
C:\WINDOWS\system32\ha3f.exe
C:\WINDOWS\system32\fufudc.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Documents and Settings\UP AND DOWN\Local Settings\Application Data\024dc1ae.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Words\Words.exe
C:\Program Files\MySpace\IM\MySpaceIM.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\UP AND DOWN\Desktop\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.mrfindalot.com/search.asp?si=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.mrfindalot.com/search.asp?si=
R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - C:\Program Files\DeluxeCommunications\DxcBho.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\system32\printer.exe
O2 - BHO: (no name) - {E5E2A3E7-00FE-4D31-A030-A10799DDCA66} - (no file)
O3 - Toolbar: SEARCHESSISTANT Search - {4E7BD74F-2B8D-469F-83B8-BD2AE6D9FA2E} - C:\PROGRA~1\SEARCH~1\SEARCH~1.DLL
O3 - Toolbar: SEARCHESSISTANT Related - {4E7BD74F-2B8D-469E-83B8-BD2AE6D9FA2E} - C:\PROGRA~1\SEARCH~1\SEARCH~1.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Mirar - {9A9C9B68-F908-4AAB-8D0C-10EA8997F37E} - C:\WINDOWS\system32\WinNB69.dll
O4 - HKLM\..\Run: [Bucimnn] C:\Program Files\Kbvk\Gvzd.exe
O4 - HKLM\..\Run: [024dc1ae.exe] C:\WINDOWS\system32\024dc1ae.exe
O4 - HKLM\..\Run: [{6B-B3-3F-FD-ZN}] C:\windows\system32\qkdsregp.exe CORN001
O4 - HKLM\..\Run: [ExploreUpdSched] C:\WINDOWS\system32\lwinlrds.exe CORN001
O4 - HKLM\..\Run: [RreN4HW] C:\WINDOWS\system32\czuehf.exe
O4 - HKLM\..\Run: [FQQERQ] "C:\WINDOWS\system32\kcnzrop6.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [etiylhiA] C:\WINDOWS\etiylhiA.exe
O4 - HKLM\..\Run: [aaa00000] RUNDLL32.EXE aaa0000023.dll,n 000000000000001d
O4 - HKLM\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKLM\..\Run: [{34D6B3FD-09DF-1033-0815-050416200001}] "C:\Program Files\Common Files\{34D6B3FD-09DF-1033-0815-050416200001}\Update.exe" mc-58-12-0000106
O4 - HKLM\..\Run: [{34D6B3FD-09DE-1033-0815-050416200001}] "C:\Program Files\Common Files\{34D6B3FD-09DE-1033-0815-050416200001}\Update.exe" mc-58-12-0000106
O4 - HKLM\..\Run: [webHancer Agent] C:\Program Files\webHancer\Programs\whagent.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [{34D6B3FD-09E0-1033-0815-050416200001}] "C:\Program Files\Common Files\{34D6B3FD-09E0-1033-0815-050416200001}\Update.exe" mc-58-12-0000106
O4 - HKLM\..\Run: [Ultimate Defender] "C:\Program Files\Ultimate Defender\UltimateDefender.exe" hide
O4 - HKLM\..\Run: [WinAVX] C:\WINDOWS\system32\WinAvXX.exe
O4 - HKLM\..\Run: [AntispyStorm] C:\Program Files\AntispyStorm\AntispyStorm.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [024dc1ae.exe] C:\Documents and Settings\UP AND DOWN\Local Settings\Application Data\024dc1ae.exe
O4 - HKCU\..\Run: [CMFibula] "C:\Program Files\CMFibula\CMFibula.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet
O4 - HKCU\..\Run: [DeluxeCommunications] C:\Program Files\DeluxeCommunications\Dxc.exe
O4 - HKCU\..\Run: [ufwo] C:\PROGRA~1\COMMON~1\ufwo\ufwom.exe
O4 - HKCU\..\Run: [IpWins] C:\Program Files\Ipwindows\ipwins.exe
O4 - HKCU\..\Run: [WinPop] C:\Program Files\WinPop\winpop.exe
O4 - HKCU\..\Run: [WinTouch] C:\Documents and Settings\UP AND DOWN\Application Data\WinTouch\WinTouch.exe
O4 - HKCU\..\Run: [SfKg6w] C:\Documents and Settings\UP AND DOWN\Application Data\Microsoft\Windows\gwxtfb.exe
O4 - HKCU\..\Run: [Words] C:\Program Files\Words\Words.exe
O4 - HKCU\..\Run: [WinAble] C:\Program Files\WinAble\winable.exe
O4 - HKCU\..\Run: [WinAVX] C:\WINDOWS\system32\WinAvXX.exe
O4 - Startup: .protected
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: system.exe
O4 - Startup: Think-Adz.lnk = C:\WINDOWS\system32\lwinlrds.exe
O4 - Global Startup: .protected
O4 - Global Startup: autorun.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.74\AMVConverter\grab.html
O8 - Extra context menu item: Add to Media Manager... - C:\Program Files\MP3 Player Utilities 3.74\MediaManager\grab.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O10 - Broken Internet access because of LSP chain gap (#1 in chain of 19 missing)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper2007261.dll
O18 - Filter: text/html - {65BD126C-9E4B-4371-911F-EE85CA17D52B} - C:\WINDOWS\system32\OTPDDP~1.DLL
O20 - AppInit_DLLs: dxclib303562752.dll
O20 - Winlogon Notify: Dynamic Directory - C:\WINDOWS\
O20 - Winlogon Notify: OemStartMenuData - C:\WINDOWS\
O20 - Winlogon Notify: WindowsUpdate - C:\WINDOWS\system32\guard.tmp (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\TVVETyBMT0M\command.exe
O23 - Service: COM+ Messages - Unknown owner - C:\WINDOWS\system32\svchosts.exe" -e mc-58-12-0000106 (file missing)
O23 - Service: M-Audio Installer (EvoInstallerService) - Unknown owner - C:\Program Files\M-Audio\Install\EvoInst.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Net Agent - Unknown owner - C:\WINDOWS\dls0523pmw.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Windows Overlay Components - Unknown owner - C:\WINDOWS\etiylhi.exe

 

[TLALOC]

Tell your homie to download and run "HijackThis".


http://www.filehippo.com/download_hijackthis/


Then have him save and post the log here and I will take a look at it and tell you what is wrong.

Thnx for the info....My homie got a friend of his to look @ his comp already tho. Didnt tell me what was wrong with it. Thnx again!

 

[GrafsiccDesigns]

odd question time.


I have about 70+sites in "favorites". When I come across a new site I like I add to favorites and it's at the bottom of list and I have to drag it up through the whole list so it'll be near top so I can visit more often, is there anyway to add favorites to the top of list as opposed of it going directly to the bottom of list.

if your using firefox go to bookmarks>organize bookmarks....you can make a folder for the favorites your gonna want to keep more accessible so whenever you save a site you can put it in that folder and have that folder at the top of your list.....

otherwise i dont think theres a way to set your favorites/ bookmarks to save from the top....

 

[TeleVaginAuez]

HERE IS MY LOG FILE PLZ LET ME KNOW IF YOU CAN HELP

Logfile of HijackThis v1.99.1
Scan saved at 6:16:18 PM, on 8/4/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32 mss.exe
C:WINDOWS ystem32winlogon.exe
C:WINDOWS ystem32 ervices.exe
C:WINDOWS ystem32lsass.exe
C:WINDOWS ystem32 vchost.exe
C:WINDOWSSystem32 vchost.exe
C:WINDOWSExplorer.exe
C:WINDOWS ystem32LEXBCES.EXE
C:WINDOWS ystem32 poolsv.exe
C:WINDOWS ystem32LEXPPS.EXE
C:WINDOWS ystem32cisvc.exe
Crogram FilesM-AudioInstallEvoInst.exe
Crogram FilesSpyware Doctor vcntaux.exe
Crogram FilesSpyware Doctor wdsvc.exe
C:WINDOWS
tiylhi.exe
C:WINDOWS ystem32czuehf.exe
C:WINDOWS ystem32ha3f.exe
C:WINDOWS ystem32fufudc.exe
C:WINDOWS ystem32RUNDLL32.EXE
Crogram FilesQuickTimeqttask.exe
Crogram FilesTunesTunesHelper.exe
Crogram FilesInternet Explorerexplore.exe
Crogram FilesSpyware DoctorSDTrayApp.exe
Cocuments and SettingsUP AND DOWNLocal SettingsApplication Datadc1ae.exe
Crogram FilesPodbinPodService.exe
Crogram FilesWordsWords.exe
Crogram FilesMySpaceIMMySpaceIM.exe
CROGRA~1Yahoo!MESSEN~1ymsgr_tray.exe
C:WINDOWS ystem32cidaemon.exe
Cocuments and SettingsUP AND DOWNDesktopHijackThis.exe

R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://www.mrfindalot.com/search.asp?si=
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://www.mrfindalot.com/search.asp?si=
R3 - URLSearchHook: (no name) - {A8BD6820-6ED7-423E-9558-2D1486B0FEEA} - Crogram FilesDeluxeCommunicationsDxcBho.dll
F2 - REG:system.ini: Shell=Explorer.exe C:WINDOWS ystem32printer.exe
O2 - BHO: (no name) - {E5E2A3E7-00FE-4D31-A030-A10799DDCA66} - (no file)
O3 - Toolbar: SEARCHESSISTANT Search - {4E7BD74F-2B8D-469F-83B8-BD2AE6D9FA2E} - CROGRA~1SEARCH~1SEARCH~1.DLL
O3 - Toolbar: SEARCHESSISTANT Related - {4E7BD74F-2B8D-469E-83B8-BD2AE6D9FA2E} - CROGRA~1SEARCH~1SEARCH~1.DLL
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Crogram FilesYahoo!CompanionInstallscpnyt.dll
O3 - Toolbar: Mirar - {9A9C9B68-F908-4AAB-8D0C-10EA8997F37E} - C:WINDOWS ystem32WinNB69.dll
O4 - HKLM..Run: [Bucimnn] Crogram FilesKbvkGvzd.exe
O4 - HKLM..Run: [024dc1ae.exe] C:WINDOWS ystem32dc1ae.exe
O4 - HKLM..Run: [{6B-B3-3F-FD-ZN}] C:windows ystem32qkdsregp.exe CORN001
O4 - HKLM..Run: [ExploreUpdSched] C:WINDOWS ystem32lwinlrds.exe CORN001
O4 - HKLM..Run: [RreN4HW] C:WINDOWS ystem32czuehf.exe
O4 - HKLM..Run: [FQQERQ] "C:WINDOWS ystem32kcnzrop6.exe"
O4 - HKLM..Run: [UserFaultCheck] %systemroot% ystem32dumprep 0 -u
O4 - HKLM..Run: [AOLDialer] Crogram FilesCommon FilesAOLACSAOLDial.exe
O4 - HKLM..Run: [etiylhiA] C:WINDOWS
tiylhiA.exe
O4 - HKLM..Run: [aaa00000] RUNDLL32.EXE aaa0000023.dll,n 000000000000001d
O4 - HKLM..Run: [DeluxeCommunications] Crogram FilesDeluxeCommunicationsDxc.exe
O4 - HKLM..Run: [{34D6B3FD-09DF-1033-0815-050416200001}] "Crogram FilesCommon Files{34D6B3FD-09DF-1033-0815-050416200001}Update.exe" mc-58-12-0000106
O4 - HKLM..Run: [{34D6B3FD-09DE-1033-0815-050416200001}] "Crogram FilesCommon Files{34D6B3FD-09DE-1033-0815-050416200001}Update.exe" mc-58-12-0000106
O4 - HKLM..Run: [webHancer Agent] Crogram FileswebHancerProgramswhagent.exe
O4 - HKLM..Run: [QuickTime Task] "Crogram FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "Crogram FilesTunesTunesHelper.exe"
O4 - HKLM..Run: [{34D6B3FD-09E0-1033-0815-050416200001}] "Crogram FilesCommon Files{34D6B3FD-09E0-1033-0815-050416200001}Update.exe" mc-58-12-0000106
O4 - HKLM..Run: [Ultimate Defender] "Crogram FilesUltimate DefenderUltimateDefender.exe" hide
O4 - HKLM..Run: [WinAVX] C:WINDOWS ystem32WinAvXX.exe
O4 - HKLM..Run: [AntispyStorm] Crogram FilesAntispyStormAntispyStorm.exe
O4 - HKLM..Run: [SDTray] "Crogram FilesSpyware DoctorSDTrayApp.exe"
O4 - HKCU..Run: [024dc1ae.exe] Cocuments and SettingsUP AND DOWNLocal SettingsApplication Datadc1ae.exe
O4 - HKCU..Run: [CMFibula] "Crogram FilesCMFibulaCMFibula.exe"
O4 - HKCU..Run: [Yahoo! Pager] "CROGRA~1Yahoo!MESSEN~1YAHOOM~1.EXE" -quiet
O4 - HKCU..Run: [DeluxeCommunications] Crogram FilesDeluxeCommunicationsDxc.exe
O4 - HKCU..Run: [ufwo] CROGRA~1COMMON~1ufwoufwom.exe
O4 - HKCU..Run: [IpWins] Crogram FilesIpwindowspwins.exe
O4 - HKCU..Run: [WinPop] Crogram FilesWinPopwinpop.exe
O4 - HKCU..Run: [WinTouch] Cocuments and SettingsUP AND DOWNApplication DataWinTouchWinTouch.exe
O4 - HKCU..Run: [SfKg6w] Cocuments and SettingsUP AND DOWNApplication DataMicrosoftWindows wxtfb.exe
O4 - HKCU..Run: [Words] Crogram FilesWordsWords.exe
O4 - HKCU..Run: [WinAble] Crogram FilesWinAblewinable.exe
O4 - HKCU..Run: [WinAVX] C:WINDOWS ystem32WinAvXX.exe
O4 - Startup: .protected
O4 - Startup: Adobe Gamma.lnk = Crogram FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O4 - Startup: system.exe
O4 - Startup: Think-Adz.lnk = C:WINDOWS ystem32lwinlrds.exe
O4 - Global Startup: .protected
O4 - Global Startup: autorun.exe
O7 - HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem, DisableRegedit=1
O7 - HKLMSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem, DisableRegedit=1
O8 - Extra context menu item: &Yahoo! Search - file:///Crogram FilesYahoo!Common/ycsrch.htm
O8 - Extra context menu item: Add to AMV Convert Tool... - Crogram FilesMP3 Player Utilities 3.74AMVConverter rab.html
O8 - Extra context menu item: Add to Media Manager... - Crogram FilesMP3 Player Utilities 3.74MediaManager rab.html
O8 - Extra context menu item: Yahoo! &Dictionary - file:///Crogram FilesYahoo!Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///Crogram FilesYahoo!Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///Crogram FilesYahoo!Common/ycsms.htm
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - CROGRA~1MICROS~3INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - CROGRA~1MICROS~3INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile Favorite... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - CROGRA~1MICROS~3INetRepl.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - Crogram FilesYahoo!Commonyiesrvc.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Crogram FilesYahoo!MessengerYahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - Crogram FilesYahoo!MessengerYahooMessenger.exe
O10 - Broken Internet access because of LSP chain gap (#1 in chain of 19 missing)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - Crogram FilesYahoo!CommonYinsthelper2007261.dll
O18 - Filter: text/html - {65BD126C-9E4B-4371-911F-EE85CA17D52B} - C:WINDOWS ystem32OTPDDP~1.DLL
O20 - AppInit_DLLs: dxclib303562752.dll
O20 - Winlogon Notify: Dynamic Directory - C:WINDOWS
O20 - Winlogon Notify: OemStartMenuData - C:WINDOWS
O20 - Winlogon Notify: WindowsUpdate - C:WINDOWS ystem32 uard.tmp (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - Crogram FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: Command Service (cmdService) - Unknown owner - C:WINDOWSTVVETyBMT0Mcommand.exe
O23 - Service: COM+ Messages - Unknown owner - C:WINDOWS ystem32 vchosts.exe" -e mc-58-12-0000106 (file missing)
O23 - Service: M-Audio Installer (EvoInstallerService) - Unknown owner - Crogram FilesM-AudioInstallEvoInst.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - Crogram FilesCommon FilesInstallShieldDriver Intel 32IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - Crogram FilesPodbinPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:WINDOWS ystem32LEXBCES.EXE
O23 - Service: Net Agent - Unknown owner - C:WINDOWSdls0523pmw.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - Crogram FilesIntelPROSetWiredNCSSyncNetSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - Crogram FilesSpyware Doctor vcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - Crogram FilesSpyware Doctor wdsvc.exe
O23 - Service: Windows Overlay Components - Unknown owner - C:WINDOWS
tiylhi.exe

You got hella adware/spyware homie.

BHO=Browser Helper Objects. It is usually shit like yahoo toolbars, google toolbars, and ect.... I highlighted it in green. It has no name no file.... it is a sign of adware. I suggest you remove it from your registry.

Anytime you see a BHO its suspect but mainly if it says no file or missing file.


webHancer is spyware and adware all in one...you might want to kill it also.

DeluxeCommunications is adware... get rid of it.

There is some other shit that looks kinda suspect also but not 100% sure so I'll leave it at that, im too tired to really analyze shit right now.

 

[TeleVaginAuez]

Thnx for the info....My homie got a friend of his to look @ his comp already tho. Didnt tell me what was wrong with it. Thnx again!

fo sho mayne....





@ mudoloc_650.... post up a screen pic of the processes that are running in your task manager. I want to see if there are any viruses running.

 

[William206]

None of my internet browsers will open yahoo.com google.com or myspace.com

Done hella virus and adware scans and cant figure out what the fuck the problem is.

and i cant fucking search for the problem on google or yahoo becuase i cant fucking open that shit.

I used that trends mirco once and it let me use that shit for about a week and then stoped again. and now it crashes the internet when i try to go there.
and somehow it keeps regenerating new spyware and 1 virus on my comp that i keep removing every 2 days or so.

if anyone knows how i can fix this without formatting that would be dope.

 

[mike55dawg]

anyone have this message "critical error" attention some dangerous viruses detected in your system click ok to download anti spyware. just keeps poppin up even when you click ok it wants you to buy spyware protection i have spyware protection and it still says that cant get rid of it! please help!

 

[Ethereal]

None of my internet browsers will open yahoo.com google.com or myspace.com

Done hella virus and adware scans and cant figure out what the fuck the problem is.

and i cant fucking search for the problem on google or yahoo becuase i cant fucking open that shit.

I used that trends mirco once and it let me use that shit for about a week and then stoped again. and now it crashes the internet when i try to go there.
and somehow it keeps regenerating new spyware and 1 virus on my comp that i keep removing every 2 days or so.

if anyone knows how i can fix this without formatting that would be dope.

anyone have this message "critical error" attention some dangerous viruses detected in your system click ok to download anti spyware. just keeps poppin up even when you click ok it wants you to buy spyware protection i have spyware protection and it still says that cant get rid of it! please help!

Click Here and download Malwarebytes' Anti-Malware 1.24.

1. Make sure you run the update to get the latest definitions.
2. Run scan (not full scan).
3. Click show results.
4. Click remove selected.
5. Reboot if/when it tells you.

I have had great success using this program to fix other peoples computers, especially when they get that fake "spyware" program trojan installed on their computer that tells them to purchase it. What ever you do, do not comply with that virus/trojan it will only make matters worse.

 

[mike55dawg]

ethereal homie good look i ran thet malwarebytes it work i even google my problem no one could give me the right advice once again the siccnet comes through! thanks

 

[William206]

I ran that shit and it found hella shit.. i stopped in it the middle cuz it said it was fining like 1500+ shit so i thought it fucked up and froze or something... it ended up letting me remove hella shit anyway. and now google works.. gonna run it again and just let it finish


thanks alot

 

[Ethereal]

Damn 1500.. that's a lot. Once you're finished I would run it again all the way through to make sure you got everything and that nothing self-installed when you rebooted. It has never found anything the second time, but I've never seen 1500. It sounds like you have accumulated a lot of garbage over the months/years.

 

[MRTHECOSE]

i bought a comp off craigslist . the dude has 650 mb of space being used on a profile that isnt there.. how can i access to profile to see whats in it and delete once i peep the goodies he has in there hiding???

 

[Ethereal]

How do you know where the 650mb is?

Log in as Administrator. Go to Control Panel, User Accounts, and User Accounts again. Where it says or pick a user account to change, what accounts do you see there?

 

[MRTHECOSE]

i looked under all user.. i was surfin around lookin for crap and seen he had a profile named bart wit 650 when i clicke d properties it told me how much he had under there..i recreated the account hoping it pop up. then it asked for password on all my accounts i reset my comp and deleted the bart profile.. now im wondering how the hell to get that space back and see whats under it

 

[Ethereal]

The All Users directory is not a profile, it is a place where certain programs/files are placed so that they are available to all users as opposed to just your profile. For example, say you have two accounts, User 1 and User 2. If you log into User 1 and place a file on the desktop, you will only see that file on the User 1 account. Now if you go to C:\Documents and Settings\All Users\Desktop and you place a file on the desktop, that file will appear on the desktop of User 1 and User 2. This feature is used when, let's say, you install Winamp and you want everyone on the computer to be able to play Mp3's with it. You would install it to the All Users directory. You usually don't have to install the program directly to this location, if you are the Administrator it will usually do it automatically.

In short, anything under the All Users directory IS NOT a profile account. If you deleted it then the dick space should have been automatically recovered.

Am I making sense to you?

 

[MRTHECOSE]

YUP .. IMMA GO HOME AND RECHECK WHAT THE HELL I SEEN AND I WILL REFERRENCE BACK TO THIS.. THANKS

 

[William206]

Damn 1500.. that's a lot. Once you're finished I would run it again all the way through to make sure you got everything and that nothing self-installed when you rebooted. It has never found anything the second time, but I've never seen 1500. It sounds like you have accumulated a lot of garbage over the months/years.

yeah i ran that shit again today fully this time.. and it found over 2500 mal files or whatever they are called..

Now this shit works great. everything is better then when i got it.. I got this shit form my brother and it was fucked befor i got it.


siccness saves the day

 

[WT SAVAGE]

quick question. i have 2 accounts on my computer, one is mine and the other is for my wife. when im on my account and try to log off and go on her account, it says i need a password. but when i start the computer and click on her account, i dont need a password and it logs right on. whats the deal?

edit. i tryed another method which said " hit windows key + L" so when i do that it says "this computer is in use and is locked. only owner/ admin has PW" i never set a password.

 

[Ethereal]

Try the following:

Click Start and then Run. Type in control userpasswords2 Now uncheck users must enter a username and password to use this computer.

Also, go to Start, Control Panel, User Accounts, User Accounts, Change the way users log on or off. Make sure both options are checked.

 

[WT SAVAGE]

still nothing, oh well thanks for trying to help.


i got another question. i put AVAST on a computer and deleted all the viruses , apperently it deleted a registery in the CD-RW drive and now it wont recgonized the E: drive. how do i fix this without fuckin everything up.