I cant really say when exactly my problems started with allaboutsearching.com, but I believe they started about one week ago. I have attempted different software programs (spybot, etc) to eliminate but nothing seems to help. In addition, I think I have messed my computer alot more by just checking and deleting everything that was a "threat" file.
Please help.
My email for contact info. 'email removed'
admin: email address removed to protect your privacy
I have included my HJT.log.:
Logfile of HijackThis v1.97.7
Scan saved at 12:05:03 AM, on 4/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\svchost.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\README~1\JUMP BLUE.exe
C:\docume~1\michel~1\locals~1\temp\MYE.exe
C:\windows\temp\LBQYYn.exe
C:\windows\temp\qHjBd.exe
C:\windows\temp\4MMes.exe
C:\Program Files\ClearSearch\Loader.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Common files\updater\wupdater.exe
C:\Program Files\Bargain Buddy\bin2\bargains.exe
C:\msbb.exe
C:\PROGRA~1\WHENUS~1\Search.exe
C:\Program Files\AutoUpdate\AutoUpdate.exe
C:\Program Files\Messenger\MSMSGS.EXE
C:\Documents and Settings\Michelle Narvaez\Application Data\amee.exe
C:\WINDOWS\System32\wnscpsv.exe
C:\PROGRA~1\CLOCKS~1\Sync.exe
C:\PROGRA~1\ezula\mmod.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\uptodate.exe
c:\ClrSchP072.exe
c:\ClrSchP072.exe
C:\Documents and Settings\Michelle Narvaez\Desktop\HJT\HJT.exe
C:\Program Files\Save\Save.exe
C:\WINDOWS\System32\SpefM8.exe
C:\WINDOWS\System32\HotE.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://allaboutsearc.../searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://allaboutsearc.../searchbar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://allaboutsearc...://www.msn.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://default-homep...rt.cgi?new-hklm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://allaboutsearc.../searchbar.html
R3 - URLSearchHook: IncrediFindBHO Class - {5D60FF48-95BE-4956-B4C6-6BB168A70310} - C:\PROGRA~1\INCRED~1\BHO\INCFIN~1.DLL
O3 - Toolbar: Search - {2CF0B992-5EEB-4143-99C0-5297EF71F444} - C:\WINDOWS\System32\stlbdist.DLL
O4 - HKLM\..\Run: [ATOMTHE] C:\PROGRA~1\README~1\JUMP BLUE.exe
O4 - HKLM\..\Run: [MYE] C:\docume~1\michel~1\locals~1\temp\MYE.exe
O4 - HKLM\..\Run: [LBQYYn] C:\windows\temp\LBQYYn.exe
O4 - HKLM\..\Run: [qHjBd] C:\windows\temp\qHjBd.exe
O4 - HKLM\..\Run: [4MMes] C:\windows\temp\4MMes.exe
O4 - HKLM\..\Run: [ClrSchLoader] C:\Program Files\ClearSearch\Loader.exe
O4 - HKLM\..\Run: [{2CF0B992-5EEB-4143-99C0-5297EF71F444}] rundll32.exe C:\WINDOWS\System32\stlbdist.DLL,DllRunMain
O4 - HKLM\..\Run: [updater] C:\Program Files\Common files\updater\wupdater.exe
O4 - HKLM\..\Run: [Bargains] C:\Program Files\Bargain Buddy\bin2\bargains.exe
O4 - HKLM\..\Run: [msbb] c:\msbb.exe
O4 - HKLM\..\Run: [TB_setup] C:\DOCUME~1\MICHEL~1\LOCALS~1\Temp\tb_setup.exe /dcheck
O4 - HKLM\..\Run: [nchkd] C:\WINDOWS\nchkd.exe
O4 - HKLM\..\Run: [WhenUSearch] C:\PROGRA~1\WHENUS~1\Search.exe
O4 - HKLM\..\Run: [AutoUpdater] "C:\Program Files\AutoUpdate\AutoUpdate.exe"
O4 - HKLM\..\Run: [RunWindowsUpdate] C:\WINDOWS\uptodate.exe
O4 - HKLM\..\Run: [4S2NSLA3QS#366] C:\WINDOWS\System32\MwuD1.exe
O4 - HKLM\..\Run: [WhenUSave] C:\Program Files\Save\Save.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background
O4 - HKCU\..\Run: [Aaou] C:\Documents and Settings\Michelle Narvaez\Application Data\amee.exe
O4 - HKCU\..\Run: [WNSI] C:\WINDOWS\System32\wnscpsv.exe
O4 - HKCU\..\Run: [ClockSync] C:\PROGRA~1\CLOCKS~1\Sync.exe /q
O4 - HKCU\..\Run: [eZmmod] C:\PROGRA~1\ezula\mmod.exe
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O10 - Unknown file in Winsock LSP: c:\windows\system32\inetadpt.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\inetadpt.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\inetadpt.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\inetadpt.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
Edited by admin, 11 April 2004 - 09:46 PM.