[SarahBob]

My computer is going nuts. Rebooting constantly and freezing. I can hardly complete any scan. I tried booting in safe mode but it won't load. I will sometimes receive a 'corrupt file' message. I ran HijackThis and here's what was found:

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\PROGRAM FILES\ewido anti-malware\ewidoctrl.exe
C:\PROGRAM FILES\ewido anti-malware\ewidoguard.exe
C:\PROGRAM FILES\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\notepad.exe
C:\Documents and Settings\New\Local Settings\Temp\Temporary Directory 4 for hijackthis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hometown.charter.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mail.yahoo.com/?.intl=us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://rd.yahoo.com/...://my.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://rd.yahoo.com/...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://rd.yahoo.com/...rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://rd.yahoo.com/...//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: €Mô ˆô
O1 - Hosts: �ô
O1 - Hosts: C
O1 - Hosts:
x

O1 - Hosts: 0E
O1 - Hosts:
x

O1 - Hosts: HG
O1 - Hosts:
x

O1 - Hosts: €M
O1 - Hosts:
€M
O1 - Hosts:
�

O1 - Hosts:
�

O1 - Hosts:
˜

O1 - Hosts:
˜

O1 - Hosts:
 

O1 - Hosts:
 

O1 - Hosts:
È`
O1 - Hosts:
È`
O1 - Hosts:
°

O1 - Hosts:
°

O1 - Hosts:
¸

O1 - Hosts:
¸

O1 - Hosts:
À

O1 - Hosts:
À

O1 - Hosts:
È

O1 - Hosts:
È

O1 - Hosts:
Ð

O1 - Hosts:
Ð

O1 - Hosts:
Ø

O1 - Hosts:
Ø

O1 - Hosts:
à

O1 - Hosts:
à

O1 - Hosts:
è

O1 - Hosts:
è

O1 - Hosts:
ð

O1 - Hosts:
ð

O1 - Hosts:
ø

O1 - Hosts:
ø

O1 - Hosts:
ˆ
O1 - Hosts:
�
O1 - Hosts:
�
O1 - Hosts:
˜
O1 - Hosts:
˜
O1 - Hosts:
 
O1 - Hosts:
 
O1 - Hosts:
¨
O1 - Hosts:
¨
O1 - Hosts:
°
O1 - Hosts:
°
O1 - Hosts:
¸
O1 - Hosts:
¸
O1 - Hosts:
À
O1 - Hosts:
À
O1 - Hosts:
È
O1 - Hosts:
È
O1 - Hosts:
Ð
O1 - Hosts:
Ð
O1 - Hosts:
Ø
O1 - Hosts:
Ø
O1 - Hosts:
à
O1 - Hosts:
à
O1 - Hosts:
è
O1 - Hosts:
è
O1 - Hosts:
ð
O1 - Hosts:
ð
O1 - Hosts:
ø
O1 - Hosts:
ø
O1 - Hosts:

O1 - Hosts: �
O1 - Hosts:
˜
O1 - Hosts:
˜
O1 - Hosts:
 
O1 - Hosts:
 
O1 - Hosts:
¨
O1 - Hosts:
¨
O1 - Hosts:
°
O1 - Hosts:
°
O1 - Hosts:
¸
O1 - Hosts:
¸
O1 - Hosts:
À
O1 - Hosts:
À
O1 - Hosts:
È
O1 - Hosts:
È
O1 - Hosts:
Ð
O1 - Hosts:
Ð
O1 - Hosts:
Ø
O1 - Hosts:
Ø
O1 - Hosts:
à
O1 - Hosts:
à
O1 - Hosts:
è
O1 - Hosts:
è
O1 - Hosts:
ð
O1 - Hosts:
ð
O1 - Hosts:
ø
O1 - Hosts:
ø
O1 - Hosts:

O1 - Hosts: øzî
x)
€)
€)
ˆ)
ˆ)
�)
�)
˜)
˜)
 )
 )
˜S)
˜S)
°)
°)
¸)
¸)
À)
À)
È)
È)
Ð)
Ð)
Ø)
Ø)
à)
à)
è)
è)
ð)
ð)
ø)
ø)
ˆ)
�)
�)
˜)
˜)
 )
 )
˜S)
˜S)
°)
°)
¸)
¸)
À)
À)
È)
È)
Ð)
Ð)
Ø)
Ø)
à)
à)
è)
è)
ð)
ð)
ø)
ø)

O1 - Hosts:
�)
˜)
˜)
 )
 )
¨)
¨)
°)
°)
¸)
¸)
À)
À)
È)
È)
Ð)
Ð)
Ø)
Ø)
à)
à)
è)
è)
ð)
ð)
ø)
ø)

O1 - Hosts: pKd
pKd
�
d
�
d
˜
d
˜
d
 
d
 
d
¨
d
¨
d
°]d
°]d
¸
d
¸
d
À
d
À
d
èmd
èmd
Ð
d
Ð
d
Ø
d
Ø
d
à
d
à
d
è
d
è
d
ð
d
ð
d
ø
d
ø
d
ˆd
�d
�d
˜d
˜d
 d
 d
¨d
¨d
°d
°d
¸d
¸d
Àd
Àd
Èd
Èd
Ðd
Ðd
Ød
Ød
àd
àd
èd
èd
ðd
ðd
ød
ød

O1 - Hosts: �d
˜d
˜d
 d
 d
¨d
¨d
°d
°d
¸d
¸d
Àd
Àd
Èd
Èd
Ðd
Ðd
Ød
Ød
àd
àd
èd
èd
ðd
ðd
ød
ød

O1 - Hosts: øzî
x\
€\
€\
ˆ\
ˆ\
�\
�\
˜\
˜\
 \
 \
€Q\
€Q\
°\
°\
¸\
¸\
À\
À\
È\
È\
Ð\
Ð\
Ø\
Ø\
à\
à\
è\
è\
ð\
ð\
ø\
ø\
ˆ\
�\
�\
˜\
˜\
 \
 \
€Q\
€Q\
°\
°\
¸\
¸\
À\
À\
È\
È\
Ð\
Ð\
Ø\
Ø\
à\
à\
è\
è\
ð\
ð\
ø\
ø\

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Lexmark X73 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X73.exe
O4 - HKLM\..\Run: [Lexmark X73 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X73.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\printray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AdwareAlert] C:\PROGRAM FILES\AdwareAlert\AdwareAlert.Exe -boot
O4 - Startup: Screen Saver Control.lnk = C:\WINDOWS\FSScrCtl.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://C:\PROGRAM FILES\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\PROGRAM FILES\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\PROGRAM FILES\Google\GoogleToolbar1.dll/cmtrans.html
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRAM FILES\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRAM FILES\Messenger\MSMSGS.EXE
O16 - DPF: ChatSpace Full Java Client 2.1.0.84 - http://about.chatspa...va/cs4fs084.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {72B45B6F-A3E0-439C-8C91-50A266B7AE09} (nsBrowserConfig Class 2) - https://www.opinions...ngc_activex.cab
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.c...ymmapi_0727.dll
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.c...utocomplete.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/...s/msnchat45.cab
O16 - DPF: {FE0BD779-44EE-4A4B-AA2E-743C63F2E5E6} (IWinAmpActiveX Class) - http://pdl.stream.ao.../ampx_en_dl.cab
O23 - Service: ewido security suite control - ewido networks - C:\PROGRAM FILES\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\PROGRAM FILES\ewido anti-malware\ewidoguard.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRAM FILES\Norton AntiVirus\AdvTools\NPROTECT.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Any help would be appreciated.

Sarah

[Advertisements]

Please do not start multiple topics. You already posted in malware, where it belongs.

Duplicate post. Topic closed.

[coachwife6]

Please do not start multiple topics. You already posted in malware, where it belongs.

Duplicate post. Topic closed.