Surf Sidekick 3-Anyone help removing?

[codey545]

Logfile of HijackThis v1.99.1
Scan saved at 12:08:58 PM, on 5/29/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Hacks\PXAgent.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\UStorSrv.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SSEMBL~1\wowexec.exe
C:\Documents and Settings\Codey\Application Data\?icrosoft\??ool32.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Codey\LOCALS~1\Temp\Rar$EX00.797\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - C:\Program Files\SurfSideKick 3\SskBho.dll
F2 - REG:system.ini: Shell=Explorer.exe, C:\WINDOWS\system32\rpoem.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,dkvhwjm.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {B1CD0783-981C-E6E1-3E8D-E07B35852EE4} - C:\WINDOWS\system32\ztmv.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe
O4 - HKCU\..\Run: [Tair] "C:\WINDOWS\SSEMBL~1\wowexec.exe" -vt tzt
O4 - HKCU\..\Run: [SurfSideKick 3] C:\Program Files\SurfSideKick 3\Ssk.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: *.musicmatch.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - AppInit_DLLs: repairs303169587.dll
O20 - Winlogon Notify: Control Panel - C:\WINDOWS\system32\nstman.dll (file missing)
O23 - Service: Apache - Unknown owner - C:\Program Files\Apache Group\Apache\Apache.exe" --ntservice (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
O23 - Service: IAA Event Monitor (IAANTMon) - Intel Corporation - C:\Program Files\Intel\Intel Application Accelerator\iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Prevx Agent (PrevxAgent) - Unknown owner - C:\Program Files\Hacks\PXAgent.exe" -f (file missing)
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: UStorage Server Service - OTi - C:\WINDOWS\system32\UStorSrv.exe

[codey545]

and the Activescan log =
Incident Status Location

Adware:Adware/PurityScan Not disinfected c:\windows\ssembl~1\wowexec.exe
Adware:Adware/PurityScan Not disinfected C:\WINDOWS\system32\ztmv.dll
Spyware:Spyware/New.net Not disinfected C:\Program Files\NewDotNet\newdotnet7_22.dll
Adware:Adware/Qoologic Not disinfected C:\WINDOWS\system32\hnxadmx.dll
Spyware:Spyware/SurfSideKick Not disinfected C:\Program Files\SurfSideKick 3\SskBho.dll
Spyware:spyware/new.net Not disinfected c:\program files\newdotnet\newdotnet6_38.dll
Spyware:spyware/surfsidekick Not disinfected C:\Documents and Settings\Codey\Local Settings\Temporary Internet Files\Ssk.log
Adware:adware/dollarrevenue Not disinfected c:\windows\drsmartload45a.exe
Adware:adware/commad Not disinfected c:\windows\uninstall_nmon.vbs
Adware:adware/bravesentry Not disinfected c:\windows\wallpap.exe
Adware:adware/maxifiles Not disinfected c:\program files\common files\InetGet
Adware:adware/zenosearch Not disinfected Windows Registry
Adware:adware/popper Not disinfected Windows Registry
Adware:adware/qoologic Not disinfected Windows Registry
Adware:adware/look2me Not disinfected Windows Registry
Adware:adware/navipromo Not disinfected Windows Registry
Adware:adware/dyfuca Not disinfected Windows Registry
Adware:adware/sqwire Not disinfected Windows Registry
Potentially unwanted tool:application/funweb Not disinfected hkey_classes_root\FunWebProducts.DataControl
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Codey\Cookies\codey@2o7[2].txt
Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Codey\Cookies\codey@888[2].txt
Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Codey\Cookies\codey@888[3].txt
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Codey\Cookies\codey@ad.yieldmanager[2].txt
Spyware:Cookie/Hbmediapro Not disinfected C:\Documents and Settings\Codey\Cookies\codey@adopt.hbmediapro[2].txt
Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Codey\Cookies\codey@adtech[2].txt
Spyware:Cookie/Falkag Not disinfected C:\Documents and Settings\Codey\Cookies\codey@as-us.falkag[2].txt
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Codey\Cookies\codey@atdmt[1].txt
Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Codey\Cookies\codey@atwola[1].txt
Spyware:Cookie/nCase Not disinfected C:\Documents and Settings\Codey\Cookies\codey@banners.searchingbooth[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Codey\Cookies\codey@belnk[1].txt
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Codey\Cookies\codey@burstnet[2].txt
Spyware:Cookie/Cassava Not disinfected C:\Documents and Settings\Codey\Cookies\codey@cassava[1].txt
Spyware:Cookie/Clickbank Not disinfected C:\Documents and Settings\Codey\Cookies\codey@clickbank[2].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Codey\Cookies\codey@com[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Codey\Cookies\codey@dist.belnk[2].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Codey\Cookies\codey@doubleclick[1].txt
Spyware:Cookie/Kmpads Not disinfected C:\Documents and Settings\Codey\Cookies\codey@kmpads[2].txt
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Codey\Cookies\codey@mediaplex[1].txt
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Codey\Cookies\codey@realmedia[1].txt
Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Codey\Cookies\codey@searchportal.information[1].txt
Spyware:Cookie/Reliablestats Not disinfected C:\Documents and Settings\Codey\Cookies\codey@stats1.reliablestats[2].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Codey\Cookies\codey@tribalfusion[1].txt
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Codey\Cookies\codey@www.burstbeacon[2].txt
Spyware:Cookie/Yadro Not disinfected C:\Documents and Settings\Codey\Cookies\codey@yadro[1].txt
Adware:Adware/PurityScan Not disinfected C:\Documents and Settings\Codey\Local Settings\Temp\!update.exe
Adware:Adware/YazzleSudoku Not disinfected C:\Documents and Settings\Codey\Local Settings\Temp\~nsu.tmp\Au_.exe
Adware:Adware/Maxifiles Not disinfected C:\Documents and Settings\Codey\Local Settings\Temporary Internet Files\Content.IE5\01IZCHYF\111[1].avi
Adware:Adware/Maxifiles Not disinfected C:\Documents and Settings\Codey\Local Settings\Temporary Internet Files\Content.IE5\01IZCHYF\115[1].avi
If anyone could help me it would be appreciated.

[LonnyRJones]

Welcome to the forum

In addremove programs uninstall
SurfSideKick 3
newdotnet
WebNexus
purityscan

Restart your pc

http://www.atribune.org/content/view/28/
Post the tools report

Your running Hijackthis from a temp OR it still hasnt been unzipped, neither is a good idea.
Create a new folder, for instance C:\AntiSpyware
Download the exe from here to that new folder.
http://www.merijn.org/files/HijackThis.exe
This is necessary to ensure you have backups should anything go wrong
Make and post a new log

[tashi]

codey545? :wink::

[LonnyRJones]

Due to lack of responses this thread is closed
If you still need assistance a new log will be needed, send me or Tashi a PM and we will re-open it.