[Phenom2kx]

I seen another post similar to it and tried following the steps but it still wont go away. I have many different type of malware removers such as xoftspy, spyware doctor, adaware, and no adware. No matter what it is stuch as my homepage even after I restart my PC and pop-ups constantly occur and it even slows down my internet. Here is my log.

Logfile of HijackThis v1.99.1
Scan saved at 7:00:56 PM, on 6/2/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\Services\{BCB15C2D-7E12-4225-82CC-F992A668750C}\SVCHOST.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Documents and Settings\sRecollet\My Documents\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.ca
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.clicksear...ndex.php?aff=19
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.ca
O2 - BHO: DownloadRedirect Class - {00000000-6CB0-410C-8C3D-8FA8D2011D0A} - C:\Program Files\iMesh\iMesh5\iMeshBHO.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Ad-aware] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe" +c
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Disk Keeper] C:\WINDOWS\System32\Services\{BCB15C2D-7E12-4225-82CC-F992A668750C}\SECURITY.EXE
O4 - HKLM\..\Run: [Service Host] C:\WINDOWS\System32\Services\{BCB15C2D-7E12-4225-82CC-F992A668750C}\SVCHOST.EXE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll (file missing)
O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ub...s/GSManager.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C866E462-923F-4C0E-AE8B-607EF3D44799}: NameServer = 206.47.244.101 206.47.244.14
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

Please help...

[Advertisements]

OK. problem solved. Sorry for inconvenience.
I must of deleted something right. Now it is not stuck as my homepage and pop-ups arent happening.

[Phenom2kx]

OK. problem solved. Sorry for inconvenience.
I must of deleted something right. Now it is not stuck as my homepage and pop-ups arent happening.

[Kat]

Hello and welcome to GeeksToGo. I highly recommend you uninstall Xoftspy and NoAdware. Both of these programs are on the "Rogue"/Suspect Spyware list and are both harmful. More information can be found here about the Rogue programs.
If you would like to post a HijackThis log, I would be happy to analyze it to make sure you are free of Malware now. If not, I will close this topic. Let me know what you would like to do!

[Kat]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.