Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Support > Re: Under Attack

Reply
Thread Tools

Re: Under Attack

 
 
The Real Truth MVP
Guest
Posts: n/a
 
      10-19-2008
Use my Remove-it software, it will remove that malware from your system.
Choose yes for all options when prompted. Download it here
http://pcbutts1.com/downloads/tools/tools.htm

--
Ignore any posts made by the Stalker Leythos, he's still in love with me.
He started stalking me after I spurned his advances towards me.
He said he would stop Stalking me If I stopped mentioning his name.
As you can see that does not work. He is a sick obsessive STALKER.





"Atlas Shrugged" <(E-Mail Removed)> wrote in message
news(E-Mail Removed)...
>
> Help!! No matter how many times I run anti-virus softward, Spybot,
> Spyblaster my computer is being attached by trojans trying to get entry.
> IE7 constantly opens up random advertisement pages when I click on links
> suchs as Google or other webpages. What can I do? I get messages telling
> me I have a virus and to download Antivirus 2009, which I know is not a
> good program but there is no way to avoid it because there is no way to
> close the window. Sometimes IE stops for a few seconds and I can't
> scroll, and then acts OK. But it is very slow.
>
> I have WinXPSP2.
>
> Paul
>
>
> Here's what HiJackThis shows:
>
> Logfile of HijackThis v1.99.1
> Scan saved at 11:45, on 10/19/2008
> Platform: Windows XP SP2 (WinNT 5.01.2600)
> MSIE: Internet Explorer v7.00 (7.00.6000.16735)
>
> Running processes:
> C:\WINDOWS\System32\smss.exe
> C:\WINDOWS\system32\winlogon.exe
> C:\WINDOWS\system32\services.exe
> C:\WINDOWS\system32\lsass.exe
> D:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
> C:\WINDOWS\system32\Ati2evxx.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\System32\svchost.exe
> C:\WINDOWS\system32\spoolsv.exe
> C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
> C:\Program Files\Common Files\Apple\Mobile Device
> Support\bin\AppleMobileDeviceService.exe
> C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
> C:\Program Files\Bonjour\mDNSResponder.exe
> C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
> C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
> c:\program files\common files\mcafee\mna\mcnasvc.exe
> c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
> C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
> C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
> C:\Program Files\McAfee\MPF\MPFSrv.exe
> C:\Program Files\McAfee\MSK\MskSrver.exe
> C:\WINDOWS\system32\HPZipm12.exe
> C:\WINDOWS\system32\svchost.exe
> C:\WINDOWS\System32\svchost.exe
> C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
> C:\WINDOWS\system32\Ati2evxx.exe
> c:\PROGRA~1\mcafee.com\agent\mcagent.exe
> C:\WINDOWS\system32\WgaTray.exe
> C:\WINDOWS\Explorer.EXE
> C:\WINDOWS\SOUNDMAN.EXE
> C:\WINDOWS\system32\LVCOMSX.EXE
> C:\Program Files\Logitech\Video\LogiTray.exe
> D:\Program Files\HP\HP Software Update\HPWuSchd2.exe
> C:\Program Files\Seagate\DiscWizard\DiscWizardMonitor.exe
> C:\Program Files\Seagate\DiscWizard\TimounterMonitor.exe
> C:\Program Files\Common Files\Seagate\Schedule2\schedhlp.exe
> D:\Program Files\Nero\Nero 7\InCD\InCD.exe
> C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
> C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
> C:\Program Files\Microsoft IntelliType Pro\itype.exe
> C:\Program Files\Microsoft IntelliPoint\ipoint.exe
> D:\Program Files\iTunes\iTunesHelper.exe
> C:\Program Files\McAfee\MBK\McAfeeDataBackup.exe
> C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
> C:\Program Files\Logitech\Desktop
> Messenger\8876480\Program\LogitechDesktopMessenger .exe
> C:\WINDOWS\system32\ctfmon.exe
> C:\Program Files\Plaxo\3.14.0.44\PlaxoHelper_en.exe
> C:\Program Files\Logitech\Video\FxSvr2.exe
> D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
> D:\Program Files\NetMeter\NetMeter.exe
> D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
> C:\Program Files\iPod\bin\iPodService.exe
> D:\Program Files\nps-124\NewsProxy.exe
> D:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
> D:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
> C:\Program Files\Windows Live\Messenger\usnsvc.exe
> C:\Program Files\Internet Explorer\iexplore.exe
> C:\Program Files\Common Files\Microsoft Shared\Windows
> Live\WLLoginProxy.exe
> C:\Program Files\Outlook Express\msimn.exe
> C:\WINDOWS\system32\taskmgr.exe
> D:\Downloaded Setup Files\hijackthis.exe
>
> R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
> http://www.comcast.net/toolbar2.0/search/
> R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://forums.4aynrandfans.com/index.php?act=idx
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
> http://go.microsoft.com/fwlink/?LinkId=54896
> R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
> http://go.microsoft.com/fwlink/?LinkId=69157
> R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
> http://www.comcast.net/toolbar2.0/search/
> R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet
> Settings,ProxyOverride = localhost;*.local
> O3 - Toolbar: Merriam-Webster Online -
> {B7B76DD6-B6F0-4443-AF81-6A3ECF12A57D} - C:\WINDOWS\_MWOLTB.DLL
> O3 - Toolbar: Comcast Toolbar - {4E7BD74F-2B8D-469E-93BE-BE2DF4D9AE29} -
> C:\PROGRA~1\COMCAS~2\COMCAS~1.DLL
> O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
> O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
> O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program
> Files\Logitech\Video\ISStart.exe
> O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program
> Files\Logitech\Video\LogiTray.exe
> O4 - HKLM\..\Run: [HP Software Update] D:\Program Files\HP\HP Software
> Update\HPWuSchd2.exe
> O4 - HKLM\..\Run: [DiscWizardMonitor.exe] C:\Program
> Files\Seagate\DiscWizard\DiscWizardMonitor.exe
> O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program
> Files\Seagate\DiscWizard\TimounterMonitor.exe
> O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common
> Files\Seagate\Schedule2\schedhlp.exe"
> O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common
> Files\Ahead\Lib\NeroCheck.exe
> O4 - HKLM\..\Run: [InCD] D:\Program Files\Nero\Nero 7\InCD\InCD.exe
> O4 - HKLM\..\Run: [RemoteControl] "C:\Program
> Files\CyberLink\PowerDVD\PDVDServ.exe"
> O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program
> Files\Java\jre1.6.0_07\bin\jusched.exe"
> O4 - HKLM\..\Run: [mcagent_exe] "C:\Program
> Files\McAfee.com\Agent\mcagent.exe" /runkey
> O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType
> Pro\itype.exe"
> O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft
> IntelliPoint\ipoint.exe"
> O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program
> Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
> O4 - HKLM\..\Run: [QuickTime Task] "D:\Program
> Files\QuickTime\QTTask.exe" -atboottime
> O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common
> Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
> O4 - HKLM\..\Run: [iTunesHelper] "D:\Program
> Files\iTunes\iTunesHelper.exe"
> O4 - HKLM\..\Run: [McAfee Backup] "C:\Program
> Files\McAfee\MBK\McAfeeDataBackup.exe"
> O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
> O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows
> Live\Messenger\MsnMsgr.Exe" /background
> O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop
> Messenger\8876480\Program\LogitechDesktopMessenger .exe
> O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program
> Files\Logitech\Video\ManifestEngine.exe" boot
> O4 - HKCU\..\Run: [OM_Monitor] D:\Program Files\OLYMPUS\OLYMPUS
> Master\Monitor.exe -NoStart
> O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
> O4 - HKCU\..\Run: [OM2_Monitor] "D:\Program Files\OLYMPUS\OLYMPUS Master
> 2\MMonitor.exe" -NoStart
> O4 - HKCU\..\Run: [PlaxoUpdate] C:\Program
> Files\Plaxo\3.14.0.44\PlaxoHelper_en.exe -a
> O4 - HKCU\..\Run: [PlaxoSysTray] C:\Program
> Files\Plaxo\3.13.1.2\PlaxoSysTray.exe
> O4 - HKCU\..\Run: [SpybotSD TeaTimer] d:\Program Files\Spybot - Search &
> Destroy\TeaTimer.exe
> O4 - HKCU\..\Run: [D:\Program Files\NetMeter\NetMeter.exe] D:\Program
> Files\NetMeter\NetMeter.exe
> O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common
> Files\Adobe\Calibration\Adobe Gamma Loader.exe
> O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Program
> Files\HP\Digital Imaging\bin\hpqtra08.exe
> O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = D:\Program
> Files\HP\Digital Imaging\bin\hpqthb08.exe
> O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program
> Files\Logitech\Desktop
> Messenger\8876480\Program\LogitechDesktopMessenger .exe
> O4 - Global Startup: NewsProxy.lnk = D:\Program
> Files\nps-124\NewsProxy.exe
> O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions
> present
> O8 - Extra context menu item: &ieSpell Options - res://d:\Program
> Files\ieSpell\iespell.dll/SPELLOPTION.HTM
> O8 - Extra context menu item: Check &Spelling - res://d:\Program
> Files\ieSpell\iespell.dll/SPELLCHECK.HTM
> O8 - Extra context menu item: E&xport to Microsoft Excel -
> res://D:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
> O8 - Extra context menu item: Lookup on Merriam Webster -
> file://d:\Program Files\ieSpell\Merriam Webster.HTM
> O8 - Extra context menu item: Lookup on Wikipedia - file://d:\Program
> Files\ieSpell\wikipedia.HTM
> O8 - Extra context menu item: MWOL &Dictionary -
> res://C:\WINDOWS\_MWOLTB.DLL/23/219
> O8 - Extra context menu item: MWOL &Thesaurus -
> res://C:\WINDOWS\_MWOLTB.DLL/23/220
> O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
> C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
> O9 - Extra 'Tools' menuitem: Sun Java Console -
> {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program
> Files\Java\jre1.6.0_07\bin\ssv.dll
> O9 - Extra button: ieSpell - {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} -
> d:\Program Files\ieSpell\iespell.dll
> O9 - Extra 'Tools' menuitem: ieSpell -
> {0E17D5B7-9F5D-4fee-9DF6-CA6EE38B68A8} - d:\Program
> Files\ieSpell\iespell.dll
> O9 - Extra button: (no name) - {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} -
> d:\Program Files\ieSpell\iespell.dll
> O9 - Extra 'Tools' menuitem: ieSpell Options -
> {1606D6F9-9D3B-4aea-A025-ED5B2FD488E7} - d:\Program
> Files\ieSpell\iespell.dll
> O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
> D:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
> O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} -
> d:\PROGRA~1\SPYBOT~1\SDHelper.dll
> O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration -
> {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - d:\PROGRA~1\SPYBOT~1\SDHelper.dll
> O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
> %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
> O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
> {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network
> Diagnostic\xpnetdiag.exe (file missing)
> O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
> C:\Program Files\Messenger\msmsgs.exe
> O9 - Extra 'Tools' menuitem: Windows Messenger -
> {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program
> Files\Messenger\msmsgs.exe
> O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
> O11 - Options group: [INTERNATIONAL] International*
> O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating
> System Class) -
> http://download.mcafee.com/molbin/sh...6/mcinsctl.cab
> O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
> http://update.microsoft.com/windowsu...?1120343016628
> O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
> http://update.microsoft.com/microsof...?1134249166248
> O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient
> Class) -
> http://messenger.zone.msn.com/binary...t.cab31267.cab
> O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} (DwnldGroupMgr Class) -
> http://download.mcafee.com/molbin/sh...26/mcgdmgr.cab
> O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} (Java Plug-in
> 1.5.0_10) -
> O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} (Java Plug-in
> 1.5.0_11) -
> O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} (Java Plug-in
> 1.6.0_01) -
> O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} -
> C:\Program Files\Logitech\Desktop
> Messenger\8876480\Program\GAPlugProtocol-8876480.dll
> O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -
> C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
> O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} -
> C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
> O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
> C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
> O20 - AppInit_DLLs: ugzwbh.dll xbluwa.dll blftep.dll vmmkoy.dll bxfjzg.dll
> egxljy.dll mufpdv.dll
> O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} -
> C:\WINDOWS\system32\WPDShServiceObj.dll
> O21 - SSODL: xgpsarbm - {ADAC13DF-D72F-4A09-8312-F47EF4FE98A6} - (no file)
> O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis -
> C:\Program Files\Common Files\Seagate\Schedule2\schedul2.exe
> O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common
> Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
> O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
> C:\WINDOWS\system32\Ati2evxx.exe
> O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation -
> C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
> O23 - Service: Bonjour Service - Apple Inc. - C:\Program
> Files\Bonjour\mDNSResponder.exe
> O23 - Service: Google Updater Service (gusvc) - Google - C:\Program
> Files\Google\Common\Google Updater\GoogleUpdaterService.exe
> O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
> Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel
> 32\IDriverT.exe
> O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Program
> Files\Nero\Nero 7\InCD\InCDsrv.exe
> O23 - Service: iPod Service - Apple Inc. - C:\Program
> Files\iPod\bin\iPodService.exe
> O23 - Service: LiveUpdate - Symantec Corporation -
> C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
> O23 - Service: MBackMonitor - McAfee - C:\Program
> Files\McAfee\MBK\MBackMonitor.exe
> O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. -
> C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
> O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program
> files\common files\mcafee\mna\mcnasvc.exe
> O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. -
> C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
> O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. -
> c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
> O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. -
> C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
> O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. -
> C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
> O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee,
> Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
> O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee, Inc. -
> C:\Program Files\McAfee\MSK\MskSrver.exe
> O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
>
>
>


 
Reply With Quote
 
 
 
 
elaich
Guest
Posts: n/a
 
      10-19-2008
"The Real Truth MVP" <(E-Mail Removed)> wrote in news:fsJKk.3489$D32.2276
@flpi146.ffdc.sbc.com:

> Use my Remove-it software, it will remove that malware from your system.
> Choose yes for all options when prompted. Download it here


Don't download or run ANYTHING from pcbutts' site.
 
Reply With Quote
 
 
 
 
The Real Truth MVP
Guest
Posts: n/a
 
      10-19-2008
Something tells me that as*holes like you don't know what you are talking
about, you think you do but you don't. Please visit
http://pcbutts1.com/downloads/fu.htm you might learn more about yourself.

--
The Real Truth http://pcbutts1-therealtruth.blogspot.com/




"elaich" <(E-Mail Removed)> wrote in message news:(E-Mail Removed)...
> "The Real Truth MVP" <(E-Mail Removed)> wrote in news:fsJKk.3489$D32.2276
> @flpi146.ffdc.sbc.com:
>
>> Use my Remove-it software, it will remove that malware from your system.
>> Choose yes for all options when prompted. Download it here

>
> Don't download or run ANYTHING from pcbutts' site.


 
Reply With Quote
 
VanguardLH
Guest
Posts: n/a
 
      10-20-2008
The Real Truth MVP wrote:

> Something tells me that as*holes like you don't know what you are talking
> about, you think you do but you don't. Please visit
> http://pcbutts1.com/downloads/fu.htm you might learn more about yourself.


Oh, you mean like you falsely claiming to be an MVP?
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
PIX520 thinks it's under Land Attack 1 Cisco 3 10-07-2005 01:01 PM
Re: Microsoft websites under attack, currently being DOSsed. Lord of Darkness Computer Support 0 08-18-2003 12:04 PM
Re: Microsoft websites under attack, currently being DOSsed. Boomer Computer Support 2 08-15-2003 05:36 AM
Any one do a mini-few-sec digital handheld videocam for re-attack after violent road rage attack? dorothy.bradbury Digital Photography 15 07-20-2003 11:58 PM



Advertisments