[MagooShow]

im having trouble with some kindof virus/adward because it took away my homepage, added crap to my favorites list and then some thing changed my backround on my desktop and its saying u are unprotected u need to use this crap and its just really really messed up....wat do i do i need help quickly thank u..i am very very stressed right now please help

 

[MagooShow]

i have already done some work on it myself but its not near complete i dont think...i had did a adarware scan and deleted everything it foudn and norton and microsoft antispyware....heres wats changed...my homepage is still going to some default one...the links in my favorites are gone ... the black backround with the virus warning is gone...but im still running quite slow and im getting unusual popups and interent things trying to run but microsoft antispyware is either blocking them or asking me wether to allow or block them...SOMEONE PLEASE HELP! :4-dontkno

 

[MagooShow]

also things like c:/windows/system32/ipic32.exe and things like that want to open or someting like that...but there are a bunch of them and i can get rid of them....quick search i think is wat is my homepage and not letting me get rid of it or set my own homepage i need help and noone is responding please someone :4-dontkno

 

[Geekgirl]

Hi and welcome to TSF

Download and install: HiJackThis.

(Always create a Folder for HiJackThis anywhere but your Temp/Temporary Internet Folders or Desktop. A good place to make a folder would be in My Documents, as this is where it will save the backup files needed if there's a problem.)

Then doubleclick HijackThis.exe, and hit "Do A System Scan And Save Log". Make sure all Windows and Browsers are closed.
When the scan is finished, best to save your text file in the same folder as where you put HiJackthis.


IMPORTANT!!!
Create a New Topic and include a fresh HJT log in the HiJackThisLog Help Forum and Copy/Paste the info from your saved Hijackthis log file into your new topic.

A Moderator/ Security Team Analyst will give you instructions.


***DO NOT TRY TO FIX ANYTHING, MAJOR DAMAGE CAN BE DONE TO YOUR SYSTEM IF THIS TOOL IS USED INCORRECTLY, PLEASE WAIT FOR AN ANALYST/MODERATOR TO GIVE YOU INSTRUCTIONS***

Always describe your problem and any programs you have used to try to resolve your issue. Your description can go a long way to solving/repairing your particular issue.

 

[MagooShow]

ok update on my progress since im not getting much help here...but i will remain patient because i cannot do this w/o u...it seems like the only real thing still wrong is the bad dll files and there appear to be a lot...idk wat to do ive hit the end and i need guidance...ummm here is the hijack this log Logfile of HijackThis v1.98.2
Scan saved at 2:34:29 PM, on 8/18/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\BCMSMMSG.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Java\jre1.5.0_03\bin\jusched.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\system32\ipmn32.exe
C:\WINDOWS\system32\ipic32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://teamwarfare.com/

 

[dpak]

Try using a online virus scanner (or two) to make sure that norton is doing its job. This site has got a good list of them:

http://www.free-antivirus.ca/category.php?id=3

The panda one does spyware checking too, so that might be the best choice.

 

[Geekgirl]

Maggoshow you did not paste your complete HJT log, please follow my directions and post a log in the HiJackThisLog Help Forum