Hijack concerns -Searchforfree.info

I have been fighting with this searchforfree.info for a couple days when I found your site today. When I was trying to find out about a NVDSVC32 Error.

I have been reading other threads and am concerned about the software that I have downloaded prior to finding you and even the xoftspy that I got from your website today where Hijack this should have been.

I tried to follow your Instructions on what to do before posting a log but can't get past step one. Ad-aware will not load into my computer. I can download it but when I try to load it A blue box saying "installing wise installation wizard" appears and then closes but didn't set it up.

I tried moving on to step two but that give me an error saying a required .dll file, WS2_32.dll was not found.

I am posting this hoping you will tell me what to do from here.

Thanks - Dawn

A few days have gone by and I haven't gotten a reply so I thought I would try again by downloading Adaware, CWShreader, Spybot and HJT and provide additional information that might be helpful for someone to provide suggestions:

I immediately got a nvdsvc32 error upon starting the system

NVDSVC32 caused an invalid page fault in module NVDSVC32.exe at 0157:00591248.
Registers: (.....etc lots to type if I don't know you need it.)

I selected the "Close" option.

Then I tried to install AdAware.....

Blue pop-up that says "Initiallizing Wise Instalation Wizard"

Then pop-up that says "Checking for previously installed components"

Then nothing- back to normal desktop.

Next I tried to install CWShreader, with this I received the following error:

Error starting Program:
Required .dll file, WS2_32.dll was not found

Next I moved on to Spybot Search & Destroy. I was able to install but when I went to open it I recieved the following.

Error

Unable to execute file
C:\ProgramFile\Spybot-Search&Destry\Spybotsd.exe

Create process failed; code 1157
One of the library files needed to run this application cannot be found.

I was able to download HJT and here is the log I really hope this will allow someone to help me better! Thanks in advance! Dawn

Logfile of HijackThis v1.99.1
Scan saved at 3:59:11 PM, on 4/12/05
Platform: Windows 95 C (Win9x 4.00.1212)
MSIE: Internet Explorer v5.51 SP2 (5.51.4807.2300)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\DRMON\SMARTAGT\SMARTAGT.EXE
C:\PROGRAM FILES\PWRCHUTE\UPS.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\MGACTRL.EXE
C:\PROGRAM FILES\MATROX MGA POWERDESK\COLOR\HGCCTL95.EXE
C:\PROGRAM FILES\PWRCHUTE\ICONCLNT.EXE
C:\WINDOWS\SYSTEM\HPOOPM07.EXE
C:\WINDOWS\SYSTEM\LOADWC.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP OFFICEJET K SERIES\BIN\HPODEV07.EXE
C:\PROGRAM FILES\HEWLETT-PACKARD\HP OFFICEJET K SERIES\BIN\HPOEVM07.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\HPOINW07.EXE
\\NTSERVER01\APPS\VIRUS TOOLS DOWNLOADS\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [MGA Control Center] Mgactrl.exe
O4 - HKLM\..\Run: [Colorific Control Panel] C:\Program Files\Matrox MGA PowerDesk\Color\hgcctl95.exe
O4 - HKLM\..\Run: [MSCSD] C:\WINDOWS\options\MSCSD.EXE /start
O4 - HKLM\..\Run: [COMSMDEXE] comsmd.exe -off
O4 - HKLM\..\Run: [ICONCLNT] C:\Program Files\Pwrchute\iconclnt.exe
O4 - HKLM\..\Run: [mdac_runonce] C:\WINDOWS\SYSTEM\runonce.exe
O4 - HKLM\..\Run: [HPAIO_PrintFolderMgr] C:\WINDOWS\SYSTEM\hpoopm07.exe
O4 - HKLM\..\Run: [BrowserWebCheck] loadwc.exe
O4 - HKLM\..\Run: [icasServ] C:\WINDOWS\SYSTEM\ICASSERV.EXE
O4 - HKLM\..\Run: [C:\WINDOWS\SYSTEM\nvdsvc32.exe ] C:\WINDOWS\SYSTEM\nvdsvc32.exe
O4 - HKLM\..\Run: [XoftSpy] C:\PROGRAM FILES\XOFTSPY\XoftSpy.exe -s
O4 - HKLM\..\RunServices: [dRMON SmartAgent] drmon\SmartAgt\SmartAgt.exe
O4 - HKLM\..\RunServices: [UPS] C:\Program Files\Pwrchute\ups.exe
O4 - Startup: HPAiODevice.lnk = C:\Program Files\Hewlett-Packard\HP OfficeJet K Series\bin\hpodev07.exe
O13 - WWW. Prefix: http://
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcaf...453/mcfscan.cab
O21 - SSODL: xzSqcFsD - {30510DD9-9AFB-A773-42BF-0E0261BE89BE} - C:\WINDOWS\SYSTEM\fo.dll

#1
dawn

Posted 06 April 2005 - 12:56 PM

Advertisements

#2
dawn

Posted 12 April 2005 - 03:08 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us