View Single Post
Old 06-27-2007, 04:34 PM   #14 (permalink)
sUBs
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
 
sUBs's Avatar
 
Join Date: May 2005
Posts: 24,494
OS: N/A


Re: Need help with massive spyware...

Please disable AdWatch, as it may hinder the removal of some entries.
You can re-enable it after you're clean. To disable AdWatch:
  • Open AdAware SE.
  • Go to AdWatch User Interface.
  • Go to Tools and Preferences.
  • At the bottom of the screen you will see 2 options Active and Automatic.
  • Active: This will turn Ad-Watch On\Off without closing it
  • Automatic: Suspicious activity will be blocked automatically
  • Uncheck both options. You can enable these after resolving your problem.
  • Unless they are turned off they could interfere with the fix by HijackThis.

--------------


Do a HijackThis scan & place a check next to these items and select "Fix checked":

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://gomyron.com/NjU2NA==/2/3560/homepage/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - AutorunsDisabled - (no file)
O2 - BHO: MSVPS System - {49CF52D7-8D58-4E22-A874-AAD721F5B523} - C:\WINDOWS\ddesupport.dll (file missing)
O2 - BHO: (no name) - {8D99D2A3-317C-4929-8A5D-21140259D93A} - (no file)
O4 - HKLM\..\Run: [qvyuxefcfc] c:\windows\system32\qvyuxefcfc.exe qvyuxefcfc
O21 - SSODL: msole - {8A698680-3FDB-4A26-BE3E-C7CB89F41CEC} - (no file)
O21 - SSODL: msdde - {9445C360-7A41-4937-924C-E316C9591DE1} - (no file)



---------------

Quote:
keep getting popups saying "Get spyware program now blah blah blah" ...
Reboot the machine. Those pop ups should have stopped after this ComboFix run.

Please describe what happened when you tried running Kaspersky
__________________

Question - what have you done for the community today?
sUBs is offline