Newbie dot Org HomePage
Visit one of our web buddies
Need help with reading Hijack this
Lene
skaha@telus.net
09/12/04
I require assistance in ridding my comp of viruse(s). I did at one time see super-spider which I think I got rid of. I have downloaded several anti-virus and anti-spyware programs. Now I keep getting a warning that I have W32\Krepper.B. Freedom Anti Virus says it is deleting them as they come in, but none seem to stop it however and something keeps loading itself into Processes -which I have to End one by one. Each process is named starting "sgxxxxx.exe". After a week I am very frustrated and wondered if someone here would be able to help me.
Here is my Hijack log.

Logfile of HijackThis v1.98.2
Scan saved at 1:59:48 AM, on 9/12/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS3\System32\smss.exe
C:\WINDOWS3\system32\winlogon.exe
C:\WINDOWS3\system32\services.exe
C:\WINDOWS3\system32\lsass.exe
C:\WINDOWS3\system32\svchost.exe
C:\WINDOWS3\System32\svchost.exe
C:\WINDOWS3\system32\spoolsv.exe
C:\WINDOWS3\Explorer.EXE
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe
C:\WINDOWS3\System32\RUNDLL32.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS3\System32\rundll32.exe
C:\WINDOWS3\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS3\System32\taskmgr.exe
C:\Documents and Settings\Family3.HOME\Local Settings\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mytelus.net/
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.3000.1001\en-ca\msntb.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS3\System32\msdxm.ocx
O4 - HKLM\..\Run: [TELUS Security service] C:\Program Files\Zero Knowledge\TELUS Security service\Freedom.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS3\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\en-ca\msnappau.exe"
O4 - HKLM\..\Run: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" +c
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS3\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [Network Security Guard] C:\WINDOWS3\System32\sgpo0dt5ls.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS3\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Instant Access] rundll32.exe EGCOMSERVICE_1044.dll,InstantAccess
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - http://akamai.downloadv3.com/binaries/DialHTML/EGCOMSERVICE_1044_pack_XP.cab
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_EN_XP.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {9BFC2253-B9D9-477E-9488-CA450232620D} (BinAg1 Class) - https://merlin.telus.net/wizlet/Qualifier/static/controls/WebflowActiveX.CAB
O20 - AppInit_DLLs: kuuu1l8u26yh43.tlb nlue5l4eft.tlb sdfa5233r1e8.tlb el4z76mskbj8uc.tlb cfk0sfv2l1kb6y.tlb zfbu6r5t9iect2.tlb 28rxyhh599.tlb 4feo5phpl5t6.tlb sd6hpfpnrm3.tlb

Anti-SpyWare: Ad-aware, Spybot
Anti-Virus: freedom
Browser: ie
Firewall: XP
OS: WINxp


© Copyright 1998-2004 Newbie dot Org -- All rights reserved --



This site maintained by Galaxy Website Design


--|--