[JC77]

Hello guys,

I've been trying to get rid of a spyware problem with Mozilla Firefox for the last 4 hrs and I'm finally stumped. I've tried Ad Aware, Spybot, Spyware Blaster, Hijack This, Trend Micro House Call, Sophos & Microsoft Anti-Spyware. While they all found things that shouldn't be there and corrected them, I still have a persistent problem with Mozilla Firefox. I unistalled Firefox and reinstalled it, and the problem went away when it was uninstalled, and came back when I reinstalled it.

I've restarted my machine a few times after HijackThis asked me to do so, and I've noticed that the tab "020" has changed it's description a few times, from Winlogon Notify NetCache, to other variables of Winlogon Notify. Am I right in thinking that some sort of DLL is being randomly created when the machine starts up to make this keep happening?

Anyway, here's my latest Hijack This log - hoping you can help me:

-------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 23:33:05, on 04/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\System32\DeltTray.exe
D:\WINDOWS\System32\RUNDLL32.EXE
D:\WINDOWS\system32\rundll32.exe
C:\hijackthis\HijackThis.exe

O4 - HKLM\..\Run: [DeltTray] DeltTray.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [gcasServ] "D:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = D:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O20 - Winlogon Notify: RunOnce - D:\WINDOWS\system32\hrn6055se.dll
O23 - Service: Ati HotKey Poller - Unknown owner - D:\WINDOWS\System32\Ati2evxx.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - D:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe

-------------------

Regards
James

[Advertisements]

Never mind, I managed to fix it using Spy Sweeper.

[JC77]

Never mind, I managed to fix it using Spy Sweeper.

[g2i2r4]

Thank you JC77 for the feedback. This topic is now closed.