Results 1 to 4 of 4

Thread: Surf Sidekick 3 and Command Service Spyware problem

  1. #1
    Junior Member
    Join Date
    Jul 2006
    Posts
    1

    Default Surf Sidekick 3 and Command Service Spyware problem

    Yeh, I have these two spyware on my computer and they are driving me nuts.

    Here's a HijackThis log:

    Logfile of HijackThis v1.99.1
    Scan saved at 12:37:15 AM, on 7/15/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    F:\WINDOWS\System32\smss.exe
    F:\WINDOWS\system32\winlogon.exe
    F:\WINDOWS\system32\services.exe
    F:\WINDOWS\system32\lsass.exe
    F:\WINDOWS\System32\Ati2evxx.exe
    F:\WINDOWS\system32\svchost.exe
    F:\WINDOWS\System32\svchost.exe
    F:\WINDOWS\system32\rundll32.exe
    F:\WINDOWS\system32\spoolsv.exe
    F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    F:\WINDOWS\SOUNDMAN.EXE
    F:\Program Files\Telstra\Cable Login\bpcable.exe
    F:\Program Files\D-Link\AirPlus G\AirGCFG.exe
    F:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
    F:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    F:\WINDOWS\update\updmgr.exe
    F:\WINDOWS\system32\smsc.exe
    F:\WINDOWS\System32\wpabaln.exe
    F:\Program Files\Trillian\trillian.exe
    F:\WINDOWS\system32\rundll32.exe
    F:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    F:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    F:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    F:\WINDOWS\System32\svchost.exe
    F:\Program Files\Mozilla Firefox\firefox.exe
    F:\WINDOWS\explorer.exe
    F:\Program Files\WinRAR\WinRAR.exe
    F:\DOCUME~1\OWNER~1.COM\LOCALS~1\Temp\Rar$EX00.359\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://bigpond.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
    R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [ATIPTA] F:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [BigPondCable] "F:\Program Files\Telstra\Cable Login\bpcable.exe" /r
    O4 - HKLM\..\Run: [Microsoft Internel Corporat ] netvhost.exe
    O4 - HKLM\..\Run: [Win Net Wks32] netwks32.exe
    O4 - HKLM\..\Run: [D-Link AirPlus G] F:\Program Files\D-Link\AirPlus G\AirGCFG.exe
    O4 - HKLM\..\Run: [MSConfig] F:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
    O4 - HKLM\..\RunServices: [Microsoft Internel Corporat ] netvhost.exe
    O4 - HKLM\..\RunServices: [Win Net Wks32] netwks32.exe
    O4 - HKCU\..\Run: [Win Net Wks32] netwks32.exe
    O4 - HKCU\..\Run: [SpybotSD TeaTimer] F:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    O4 - HKCU\..\RunServices: [Win Net Wks32] netwks32.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsof...?1152776088140
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1152776080031
    O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - F:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - F:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - F:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Ati HotKey Poller - Unknown owner - F:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: BigPond Broadband Cable Login (bpcService) - Unknown owner - F:\Program Files\Telstra\Cable Login\bpcService.exe
    O23 - Service: Windows Update Manager (UpdateManager) - Unknown owner - F:\WINDOWS\update\updmgr.exe (file missing)
    O23 - Service: Window DLL Services - Unknown owner - F:\WINDOWS\system32\smsc.exe

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello and sorry for the wait.
    If you are still in need of assistance please go here and post a link back to this topic to flag a helper.

    If you have waited four days for advice post here.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

  3. #3
    Security Expert-Emeritus
    Join Date
    Oct 2005
    Posts
    5,025

    Default

    Hello

    Thanks for your patience, if your still in need of assistance and are not
    recieving it at another forum, Post a fresh hijackthis log please.
    But first correct its location.
    Your running Hijackthis from a temp and/Or it still hasnt been unzipped, neither is a good idea.
    Create a new folder, for instance C:\AntiSpyware
    Download the exe from here to that new folder.
    http://www.merijn.org/files/HijackThis.exe
    This is necessary to ensure you have backups should anything go wrong
    Make and post a new log
    ~~~~~~~~~~~~~~~~~~~~~~~
    Microsoft MVP Windows-Security 2006

  4. #4
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    This topic has been closed to prevent others with similar issues posting in it.
    If you need it re-opened please send me or your helper a pm and provide a link to the thread.

    Applies only to the original topic starter.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •