[help me plz]

Below is my hijack this log... recently I found a strange file in my c:\ main folder named icppro.exe and i did a spyware scan on it and came back a trojan, then some more trojans came along in the scan... i dont think everything is removed or ok, computer has been slow for a month or so now when it's normally fast as lightning.... i have had some trouble with my microphone settings/usb settings/video play back is choppy/virtual memory low.....wondering if anyone can help or tell by the log file below as i've run other virus programs many times but still no solution, thanks for any and all help.














Logfile of HijackThis v1.99.1
Scan saved at 5:03:20 PM, on 9/13/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
C:\Program Files\Motorola Wireless\WU830G USB Adapter\OdHost.exe
C:\Program Files\Motorola Wireless\WU830G USB Adapter\WLUSBCfg.exe
C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Compaq_Owner\Desktop\HijackThis.exe

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O4 - Global Startup: Motorola Wireless USB Adapter.lnk = ?
O4 - Global Startup: svchost.exe
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

[Advertisements]

Hello.

Have you disabled some of your startups? Because there are only 2 startups left.. and your Firewall and Antivirus are not included. ??

Also, I can see 2 Firewalls, ZoneAlarm and Sygate.. just choose 1 and uninstall/disable the other..

Now to the cleaning:

Download Brute Force Uninstaller to your desktop.

• Right click the file on your Desktop, and choose Extract All.
• Click Next.
• In the box to choose where to extract the files to:
• Click Browse.
• Click on the + sign next to My Computer
• Click on Local Disk (C:) or whatever your primary drive is.
• Click Make New Folder
• Type in BFU
• Click Next, and uncheck the Show Extracted Files box and then click Finish.

Right-click Here and choose "Save As" (or "Save Target As") in order to download Alcra Plus Remover.

• Save it in the same folder you made earlier (c:\BFU)

=====================================

Run Brute Force Uninstaller

Go to Start » My Computer and navigate to the C:\BFU folder.

• Start the Brute Force Uninstaller by doubleclicking BFU.exe
• Beside the white box field, click the folder icon: : select alcanshorty.bfu
• Press Execute and let it do it’s job. (You ought to see a progress bar if you did this correctly.)
• Wait for the complete script execution box to pop up and press OK.
• Press exit to terminate the BFU program.

=====================================

Post back with a fresh hijackthis log.

[Jag11]

Hello.

Have you disabled some of your startups? Because there are only 2 startups left.. and your Firewall and Antivirus are not included. ??

Also, I can see 2 Firewalls, ZoneAlarm and Sygate.. just choose 1 and uninstall/disable the other..

Now to the cleaning:

Download Brute Force Uninstaller to your desktop.

• Right click the file on your Desktop, and choose Extract All.
• Click Next.
• In the box to choose where to extract the files to:
• Click Browse.
• Click on the + sign next to My Computer
• Click on Local Disk (C:) or whatever your primary drive is.
• Click Make New Folder
• Type in BFU
• Click Next, and uncheck the Show Extracted Files box and then click Finish.

Right-click Here and choose "Save As" (or "Save Target As") in order to download Alcra Plus Remover.

• Save it in the same folder you made earlier (c:\BFU)

=====================================

Run Brute Force Uninstaller

Go to Start » My Computer and navigate to the C:\BFU folder.

• Start the Brute Force Uninstaller by doubleclicking BFU.exe
• Beside the white box field, click the folder icon: : select alcanshorty.bfu
• Press Execute and let it do it’s job. (You ought to see a progress bar if you did this correctly.)
• Wait for the complete script execution box to pop up and press OK.
• Press exit to terminate the BFU program.

=====================================

Post back with a fresh hijackthis log.

[Jag11]

Hello.

It has been a while now since my last post and I still haven't receive any feedback..

How's it going?

[Jag11]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.