Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works

Weird XP Thing... Suggestion to follow malware...

  • Please log in to reply



    New Member

  • Member
  • Pip
  • 5 posts
Alright, so I originally posted a topic in the Windows XP Forum (Weird XP Thing, Windows CD 400 miles away), and Gerry suggested to give my system a good going over using the above malware cleaning steps.

Went through all of that, and my issue is still going on.

My Issue:

No explorer bar (where the start button is, where the clock is, etc...). All of my desktop icons are also not there. I need to start programs by Ctrl-Alt-Del, and then File-New Task and browse to find the program (which oddly enough, when I click on the Desktop button, all of my Icons are still there).

And a new issue that may have just happened, or I just discovered. I can't get Internet Explorer to launch at all. I tried to re-download IE, and the install program says that a newer version is already installed, and that the install program is 'now shutting down.'

Gerry told me to post a HJT log after I ran through the malware removal process, which is what I'm doing now.

Any help will be greatly appreciated, as I'm a Mac guy, and kind of unfamilliar with Windows systems. But, I still do understand computers... somewhat...

Thanks in advance,

HJT Log:

Logfile of HijackThis v1.99.1
Scan saved at 1:56:51 AM, on 6/24/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Documents and Settings\Branson\Desktop\HijackThis.exe

O1 - Hosts: search.xtramsn.co.nz search.msn.co.uk search.msn.be search.msn.dk search.msn.fi search.msn.fr
O1 - Hosts: beta.search.msn.dk beta.search.msn.fi beta.search.msn.fr beta.search.msn.de beta.search.msn.it
O1 - Hosts: beta.search.msn.nl beta.search.msn.no beta.search.msn.es beta.search.msn.se beta.search.msn.ch
O1 - Hosts: www.alexa.com alexa.com
O1 - Hosts: www.alexa.com alexa.com
O1 - Hosts: www.alexa.com alexa.com
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: XMLDP Class - {60371670-81B9-4d06-9C42-4DEC1AABE62B} - C:\WINDOWS\xmllib.dll (file missing)
O3 - Toolbar: (no name) - {12EE7A5E-0674-42f9-A76B-000000004D00} - (no file)
O4 - HKLM\..\Run: [SystemCheck] C:\WINDOWS\SysCheckBop32
O4 - HKLM\..\Run: [98D0CE0C16B1] rundll32.exe D0CE0C16B1,D0CE0C16B1
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - Global Startup: rdri.exe
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O20 - Winlogon Notify: ShellCompatibility - C:\WINDOWS\system32\cqmres.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
  • 0




    New Member

  • Topic Starter
  • Member
  • Pip
  • 5 posts
Alright, now Ewido is popping up every once in awhile and says that I have an Infected file. I 'THINK' that I just did a successful Windows Update, and if I'm not mistaken, shouldn't that have made it so it's impossible for me to download a new trojan?

Just a question from a Mac guy...


  • 0

Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP