[Lanianna]

hello i am name lanianna skalosavich from minovetnya girl 22 years i am new for america but computers is little more. my english is bad for talking please hope to understand!maybe 1 hacker controlls me.i have text for VERY websites and i have 0 for me for help. i ask please work with me for help for me. i have 1 friend Brae he talks english more he can help me talk for websites he has txt for me to say.i work for AutoMach Detailing for cleaning for cars with 1 computer to use for email. please email [email protected] for help to me.i can understand there.please make my english good for websites to see.thank you.Excel Mobile AMD Sempron Compaq Presario v5105.Norton 2006 was corrupted by malware,denied access to symentec websites and certain google searches. displayed odd looking information as well , like website fake maybe.Scan shows nothing but looks odd it runs so fast.Panda active scan shows to be scanning even though broadband cable is unplugged !programs removed with control panel add/remove show to be uninstalling but actually do not they are still there.HP help and support works with broadband cable unplugged ! Access Denied to certain folders and applications even tho logged on as admin. Found hidden program disguised as SpyBot Seach&Destroy icon, program name DUMMY. shortcut links at desktop have properties like this: target = "C:\Program Files\Common Files\Symentec Shared\NMain.exe"/noseyworks/dat:C:\Program Files\Norton Internet Security\NISPlug.nsi/goto : No&rton Internet Security. I have uninstalled Norton and gave to her Kaspersky 6.0 but Symentec folders come back. sometimes norton live update is in add/remove program list as well. many files look this way , maybe redirection no ? ran several fix tools from symentec , all find nothing. have made several scans in mode safe mode , all find nothing. Properties change as well , for like internet settings and network connections. i disable them , then later on they are reenabled with exceptions and changes made. Kaspersky seems to work badly now. always changes made to rules. always shows riskware detected loader every 2 minutes and riskware detected new variant of loader as well. always shows one process trying to inject into processes and choose terminate then rollback but rollback fails always. always shows running as child. in safe mode it shows user accounts with Account Unknown S-15-32-547.........many numbers.this is also in registry several times with different last number as new name under hkusers with access denied to change them.access is denied to security settings in control panel but it shows firewall to be enabled but it is not. shows connecting to windows update and checking for latest even with broadband unplugged.wlan is disabled no wireless network in range here anyway.quickbuttons are all wrong like icon is for media player but mouse over text shows network places.i try to get tools like blacklight when i download to desktop it installs on own , then scan features do not work. tried trojan hunter but scan button is not available or been disabled. will run hijackthis. thank you please for the listening ! Brae
Logfile of HijackThis v1.99.1
Scan saved at 9:28:56 AM, on 8/3/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Hijck\Hijack.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.h...a...o&pf=laptop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...a...o&pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...a...o&pf=laptop
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.h...a...o&pf=laptop
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKCU\..\Run: [Advanced WindowsCare] "C:\Program Files\Advanced WindowsCare V2\Awc.exe" /startup
O8 - Extra context menu item: Add to Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q106&bd=presario&pf=laptop
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe