[cristiano_7_manu]

I recieve constant popups and Im using firefox browser

Logfile of HijackThis v1.99.1
Scan saved at 16:37:15, on 07/02/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\V2lsbGlhbSBNYXJ0aW4\command.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\dm\Local Settings\Temp\wzda4\HijackThis.exe

O17 - HKLM\System\CCS\Services\Tcpip\..\{C13D3FCC-0410-4D83-873C-E04556A49E47}: NameServer = 195.92.195.94 195.92.195.95
O20 - Winlogon Notify: avpe32 - C:\WINDOWS\SYSTEM32\avpe32.dll
O20 - Winlogon Notify: SharedDLLs - C:\WINDOWS\system32\lv8409lqe.dll (file missing)
O20 - Winlogon Notify: ThemeManager - C:\WINDOWS\system32\o448lehu1h48.dll
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\V2lsbGlhbSBNYXJ0aW4\command.exe

help would be great thanks

[Trevuren]

Hi christiano_7_manu and welcome to the Geeks to Go Forums.

My name is Trevuren and I will be helping you with your log.

I need to get you to move HijackThis to a folder of its own so that nothing gets deleted by mistake

1. Right click in an empty space on your desktop.

2. From the Menu, click New, then Folder and a folder will appear on your desktop.

3. Name the folder HJT

4. Copy/Paste your current version of HijackThis into the new Folder that was just created.

5. Now, run the program and post a fresh HJT log for review.

NOTE: Please post the entire log. In your original post, more than half was missing.

Regards,

Trevuren

[cristiano_7_manu]

Thanks for the quick reply

Ive done as above but in my first post that was the whole log

this is all it gave me

Logfile of HijackThis v1.99.1
Scan saved at 16:51:22, on 07/02/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\V2lsbGlhbSBNYXJ0aW4\command.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\System32\wuauclt.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\dm\Desktop\hjt\HijackThis.exe

O17 - HKLM\System\CCS\Services\Tcpip\..\{C13D3FCC-0410-4D83-873C-E04556A49E47}: NameServer = 195.92.195.94 195.92.195.95
O20 - Winlogon Notify: avpe32 - C:\WINDOWS\SYSTEM32\avpe32.dll
O20 - Winlogon Notify: SharedDLLs - C:\WINDOWS\system32\lv8409lqe.dll (file missing)
O20 - Winlogon Notify: ThemeManager - C:\WINDOWS\system32\o448lehu1h48.dll
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\V2lsbGlhbSBNYXJ0aW4\command.exe

[Trevuren]

You should have some programs runnings on your machine. Do you? In any event,

Hi geoniemi and welcome to the Geeks to Go Forums.

My name is Trevuren and I will be helping you with your log.

1. You are missing one important program on that computer: An antivirus.
You need to install an antivirus program as soon as you can and run a complete scan of the computer.
I suggest AVG - it's free!

AVG Anti-Virus (Free version available) http://www.grisoft.com/

Choose one, install it, and then run a full scan. Let it quarantine/delete anything it finds. Let me know if there is anything that it reports but can not remove.

2. IMPORTANT
It is important that you use a software firewall, to prevent unauthorised traffic both out of and into your computer.
Your log doesn't show a firewall running. If you have disabled it, please re-enable it.
If you do not have a firewall installed, please download and instal one of these excellent (and free) products: Zone Alarm or Sygate
It is important to note that you should only have one firewall installed at a time.

3. Once you have both of these installed, please post back a fresh HJT log.


Regards,

Trevuren

[cristiano_7_manu]

i will do so

[Trevuren]

Looking forward to hearing from you


Trevuren

[cristiano_7_manu]

I did what you said but encountered a problem when deleting several viruses from the system, 1000 infact, when I went to restart, the computer froze in the welcome screen, so I when through the Safe mode option but to no avail, I had only recently upgraded from a 98 to xp, so i just rebooted the whole system but i didnt have that much work anyway to lose. So its fine now, thats for your help anyways

[Trevuren]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.