Newbie dot Org HomePage
Visit one of our web buddies
super-spid, my mail will never be able to be read!
flynn

08/04/04
here is my hijack this as of now

Logfile of HijackThis v1.98.1
Scan saved at 5:33:34 PM, on 8/4/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\devldr32.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\System32\GEARSEC.EXE
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\vhchost.exe
C:\documents and settings\frank papandrea\local settings\temp\Cgf.exe
C:\documents and settings\frank papandrea\local settings\temp\oQOYuN.exe
C:\WINDOWS\System32\windll32.exe
C:\WINDOWS\shchost.exe
C:\Program Files\AdsGone\adsgone.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\AIM95\aim.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\unzipped\hjt[1]\hijack this\HijackThis.exe
C:\Program Files\Internet Explorer\iexplore.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://super-spider.com/hp.htm?id=9
O2 - BHO: (no name) - {467FAEB2-5F5B-4c81-BAE0-2A4752CA7F4E} - C:\WINDOWS\System32\aa2fk3engwaz.dll
O4 - HKLM\..\Run: [romahere] C:\WINDOWS\System32\matrixhere.exe
O4 - HKCU\..\Run: [romahere] C:\WINDOWS\System32\matrixhere.exe
O4 - Global Startup: winlogin.exe
O20 - AppInit_DLLs: 469j0nxrmuui.tlb

help me pleasse

snowman

08/04/04
flynn
You're missing the entire bottom portion of the hjt log. Please post that as well.

But first , just from your running processes you have an awful lot of rubbish running.
So do this first:

download ad-aware:

http://www.lavasoft.de/ms/index.htm

UPDATE it after install, before scanning
Have it clean everything.
Reboot.

Then run an online scan at Panda:

http://www.pandasoftware.com/activescan/com/activescan_principal.htm

Reboot.
Post new log,



© Copyright 1998-2004 Newbie dot Org -- All rights reserved --



This site maintained by Galaxy Website Design


--|--