Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

inqwire,advertisements,etc


  • Please log in to reply

#1
firewake

firewake

    New Member

  • Member
  • Pip
  • 1 posts
I keep on getting advertisements popping up everytime I get on line like inqwire,somethinglike "antiwin"and "exite" and other ads I have windows xp proffesional SP2 and antivirus popupblockers the whole nine yards I am always connected through a cable modem but as soon as i start online they popup left and right. I tried the first option and ran all the suggested programs but after i rebooted my com they started all over again..Here is my scan report from ewido and my HJT Post. Any help would be great Thanks ....... ---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------

+ Created on: 11:55:25 PM, 11/14/2005
+ Report-Checksum: 65E4AF59

+ Scan result:

HKU\S-1-5-21-823518204-1078145449-839522115-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1E58A84-95B3-4630-B8C2-D06B77B7A0FC} -> Spyware.NavExcel : Cleaned with backup
C:\Documents and Settings\Mike\Cookies\mike@tribalfusion[1].txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{003D1601-FD6A-429B-9045-3699AD11293D} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{17346358-1DFD-4E2B-AF76-85E779B014C9} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{1A4043D7-32B5-4FA9-A1C0-76DE246D454C} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{238677F7-1FBA-47E4-B3FC-95AF94429F12} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{3B6E1B5F-7585-4D46-95CB-45B8457A3829} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{44FCAF12-2C5E-4697-A9BD-EC4CFCD17F98} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{4985D0F1-51DB-4EAC-929E-527EEE47DD5F} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{50C579FF-5917-4EE5-8D58-53B9088FC5C2} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{55532EF7-D706-4730-9A33-030E14813587} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{5D2DAAEE-BC9F-4B21-925B-38C386692A2C} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{6EF261A0-D9F6-4F16-AA69-5A3A6DD86219} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{7F5D8FC0-07A7-4686-9445-01BA76338797} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{80061755-0A48-412A-9AE5-34A9C78B68BB} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{83699710-1B8E-4291-8A3E-4CD76F7D9FCF} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{8BD9E355-FCD2-433A-934F-240C32BDC4FF} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{A0E5F1FC-4B5E-4CD0-A791-4AE9AF2DF635} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{A148ACE2-6EED-4D30-B677-0CB6BAC9A797} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{AC321ED0-2809-4135-88E4-9F96BE354959} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{B9CE26D4-9C12-456A-9D4C-434B9EFE461A} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{CF51A206-CCE0-4F2B-BBB8-3EC7B26D2843} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{D53A79BC-4370-4C06-BC4F-56138BF79C0A} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{D684995D-68E3-4A43-B8D2-1E3463D1BFAA} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{DAED8E90-F139-44E2-B863-D12F84037DFD} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{DEF8EE5E-680D-458F-8E16-D177FCA4BC12} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 10-30-2005 - 15-45-51.SBU/{EBB6543A-68AB-4BDA-A14F-B9AB51207E24} -> Spyware.Look2Me : Cleaned with backup
C:\Program Files\SuperAdBlocker.com\Super Ad Blocker\Quarantine\Quarantine - 11-03-2005 - 09-33-45.SBU/{78B62BF2-D3B5-4CD8-84D1-F978CD17DFBB} -> Adware.SaveNow : Cleaned with backup
E:\mike\Tiger Woods PGA Tour 2005 NO CD CRACK.rar/Tiger Woods PGA Tour 2005 NO CD CRACK.exe -> TrojanDropper.Interlac.10.b : Cleaned with backup


::Report End Logfile of HijackThis v1.99.1
Scan saved at 7:20:13 PM, on 11/15/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5112.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AVPersonal\AVGNT.EXE
C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE
C:\Program Files\AVPersonal\AVWUPSRV.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\XemiComputers\Pocket Voice Recorder\PVR.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe
C:\Program Files\Secretmaker\secretmaker.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\en-us\bin\WindowsSearch.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\bin\HPOVDX05.EXE
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\en-us\bin\WindowsSearchIndexer.exe
C:\WINDOWS\system32\hpoipm07.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Mike\Local Settings\Temporary Internet Files\Content.IE5\BIMQBIXO\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SE...S01?FORM=TOOLBR
O2 - BHO: IeHelper Class - {A491D208-B353-490F-B81A-A8A3DC97042D} - C:\WINDOWS\system32\smiehlp.dll
O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0001.1119\en-us\msntb.dll
O2 - BHO: (no name) - {CE57DA55-F491-45C6-B3DB-6C98E4B17CDC} - C:\Program Files\Secretmaker\secretmakerie.dll
O3 - Toolbar: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0001.1119\en-us\msntb.dll
O3 - Toolbar: SECRETMAKER - {7435856C-6CA1-45CF-A00D-82178387F223} - C:\Program Files\Secretmaker\secretmakerie.dll
O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
O4 - HKCU\..\Run: [PVR] C:\Program Files\XemiComputers\Pocket Voice Recorder\PVR.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP OfficeJet Series 700 Startup.lnk = C:\Program Files\Hewlett-Packard\HP OfficeJet Series 700\Bin\HPOstr05.exe
O4 - Global Startup: SECRETMAKER.lnk = C:\Program Files\Secretmaker\secretmaker.exe
O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\en-us\bin\WindowsSearch.exe
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0001.1119\en-us\msntb.dll/search.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1129826294780
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: Controls Folder - C:\WINDOWS\system32\enjul1191.dll (file missing)
O21 - SSODL: SysTray.Exys - {7368D5FC-6F5C-4f5b-B964-E67214F67852} - C:\WINDOWS\system32\jdgbcgep.dll
O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\PROGRAM FILES\AVPERSONAL\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe

Attached Files


  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP