[drwiseman]

can anyone help to suggest what I need to check to be deleted from log below to remove this malware?

Logfile of HijackThis v1.99.1
Scan saved at 1:37:19 PM, on 3/13/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\drivers\dcfssvc.exe
C:\PROGRA~1\NORTON~1\navapw32.exe
C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Research In Motion\BlackBerry\DesktopMgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\ntvdm.exe
C:\DOCUME~1\Wiseman\LOCALS~1\Temp\Temporary Directory 2 for hijackthis[1].zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://web.dodhhigvq...3KG7MaQSoL.html

[Advertisements]

Hi drwiseman

Sorry for the delay in response. The forum has been very busy lately.

Since your original post is over a week old, could you please post a fresh Hijack This log for review. Please go through the steps in this thread before you post the next log as the log you posted was incomplete.

http://www.geekstogo...?showtopic=2852

If you have already fixed your machine or received help elsewhere please post back and let us know.

Thank you

[ilago]

Hi drwiseman

Sorry for the delay in response. The forum has been very busy lately.

Since your original post is over a week old, could you please post a fresh Hijack This log for review. Please go through the steps in this thread before you post the next log as the log you posted was incomplete.

http://www.geekstogo...?showtopic=2852

If you have already fixed your machine or received help elsewhere please post back and let us know.

Thank you