View Full Version : please help!
adrienne
2008-04-07, 22:23
My computer all of a sudden has many viruses.. adware, spyware, trojan etc etc. I am not really computer smart when it comes to this stuff!! I have ran spybot, it finds about 27 entries each time. I go to fix them, it says they are all fixed, I do the immunize, then the update, then restart. Then i run the scan again.... same 27 entries are there! Any suggestions?
Could you please do this?:
Open SpyBot.
Check for problems.
When the scan completes, right click on the results list, select "Copy results to clipboard".
Paste (Ctrl+V) those results here.
adrienne
2008-04-08, 01:00
180Solutions.SearchAssistant: [SBI $D1508A11] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5dafd089-24b1-4c5e-bd42-8ca72550717b}
2020Search: [SBI $1C86D773] Library (File, nothing done)
C:\WINDOWS\2020search2.dll
2020Search: [SBI $524079D1] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{4E7BD74F-2B8D-469E-92C6-CE7EB590A94D}
CoolWWWSearch.Leftovers: [SBI $C5CA9532] Library (File, nothing done)
C:\WINDOWS\2020search.dll
Smitfraud-C.: [SBI $768AA445] Executable (File, nothing done)
C:\WINDOWS\updatetc.exe
Smitfraud-C.: [SBI $AAC81DC7] Library (File, nothing done)
C:\WINDOWS\system32\MSIXU.DLL
Smitfraud-C.: [SBI $DAFF8341] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000250-0320-4dd4-be4f-7566d2314352}
Smitfraud-C.: [SBI $749A49D8] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{13197ace-6851-45c3-a7ff-c281324d5489}
Smitfraud-C.: [SBI $CA8B78D4] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4e1075f4-eec4-4a86-add7-cd5f52858c31}
Smitfraud-C.: [SBI $D738367D] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5fa6752a-c4a0-4222-88c2-928ae5ab4966}
Smitfraud-C.: [SBI $8A7B2B35] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8674aea0-9d3d-11d9-99dc-00600f9a01f1}
Smitfraud-C.: [SBI $A507ED05] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{965a592f-8efa-4250-8630-7960230792f1}
Smitfraud-C.: [SBI $81292234] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{cf021f40-3e14-23a5-cba2-717765728274}
Smitfraud-C.: [SBI $73C55E9B] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fc3a74e5-f281-4f10-ae1e-733078684f3c}
Smitfraud-C.gp: [SBI $29222CE9] Web page (File, nothing done)
C:\WINDOWS\default.htm
Microsoft.WindowsSecurityCenter.TaskManager: [SBI $FD4267D3] Settings (Registry change, nothing done)
HKEY_USERS\S-1-5-21-1136568636-1595013878-490628846-1005\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr
Microsoft.WindowsSecurityCenter_disabled: [SBI $2E20C9A9] Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\Start
Microsoft.WindowsSecurityCenter.TaskManager: [SBI $B2E55F62] Settings (Registry change, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system\DisableTaskMgr
SecondThought.STCLoader: [SBI $CD09A67D] Executable (File, nothing done)
C:\WINDOWS\stcloader.exe
Zango: [SBI $DF8DAC14] Browser helper object (Registry key, nothing done)
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5929CD6E-2062-44a4-B2C5-2C7E78FBAB38}
Zango: [SBI $5EDB554D] Application data folder (Directory, nothing done)
C:\Program Files\Seekmo\
Zango: [SBI $5A7042F6] Program directory (Directory, nothing done)
c:\Program Files\Zango\
180Solutions.SearchAssistant: [SBI $8D6AFC05] Program directory (Directory, nothing done)
c:\Program Files\180searchassistant\
180Solutions.SearchAssistant: [SBI $232559B8] Program directory (Directory, nothing done)
C:\WINDOWS\FLEOK\
180Solutions.SearchAssistant: [SBI $CBCD65CE] Program directory (Directory, nothing done)
C:\Program Files\180Solutions\
Right Media: Tracking cookie (Internet Explorer: Adrienne) (Cookie, nothing done)
--- Spybot - Search & Destroy version: 1.5.2 (build: 20080128) ---
2008-01-28 blindman.exe (1.0.0.7)
2008-01-28 SDDelFile.exe (1.0.2.4)
2008-01-28 SDMain.exe (1.0.0.5)
2007-10-07 SDShred.exe (1.0.1.2)
2008-01-28 SDUpdate.exe (1.0.8.8)
2008-01-28 SDWinSec.exe (1.0.0.11)
2008-01-28 SpybotSD.exe (1.5.2.20)
2008-01-28 TeaTimer.exe (1.5.2.16)
2008-04-06 unins000.exe (51.49.0.0)
2008-01-28 Update.exe (1.4.0.6)
2008-01-28 advcheck.dll (1.5.4.5)
2007-04-02 aports.dll (2.1.0.0)
2007-11-17 DelZip179.dll (1.79.7.4)
2008-01-28 SDFiles.dll (1.5.1.19)
2008-01-28 SDHelper.dll (1.5.0.11)
2008-01-28 Tools.dll (2.1.3.3)
2008-04-02 Includes\Cookies.sbi (*)
2007-12-26 Includes\Dialer.sbi (*)
2008-04-02 Includes\DialerC.sbi (*)
2008-04-02 Includes\HeavyDuty.sbi (*)
2008-03-19 Includes\Hijackers.sbi (*)
2008-04-02 Includes\HijackersC.sbi (*)
2008-02-27 Includes\Keyloggers.sbi (*)
2008-04-02 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2008-03-26 Includes\Malware.sbi (*)
2008-04-02 Includes\MalwareC.sbi (*)
2008-03-26 Includes\PUPS.sbi (*)
2008-04-02 Includes\PUPSC.sbi (*)
2008-04-02 Includes\Revision.sbi (*)
2008-01-09 Includes\Security.sbi (*)
2008-04-02 Includes\SecurityC.sbi (*)
2008-04-02 Includes\Spybots.sbi (*)
2008-04-02 Includes\SpybotsC.sbi (*)
2007-11-06 Includes\Tracks.uti
2008-04-02 Includes\Trojans.sbi (*)
2008-04-02 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
AngelWings
2008-04-08, 12:11
I have almost the same problem with adrienne. Right Media tracking cookie is always coming back. Please help! Thank you very much.
adrienne
2008-04-11, 21:26
hey Angel, did anyone ever respond to you? Cuz i haven't heard a word.......
Sorry,I was away for a funeral.
adrienne,you could ask for help in malware removal.
Please read the instructions here ,it has info on the logs you need to post,etc.:
http://forums.spybot.info/showthread.php?t=288
Malware removal:
http://forums.spybot.info/forumdisplay.php?f=22
AngelWings,is it just the tracking cookie being found after you scan?