Jump to content


Photo

About:Blank on windows ME


  • This topic is locked This topic is locked
5 replies to this topic

#1 zeke0123

zeke0123

    Member

  • Full Member
  • Pip
  • 7 posts

Posted 21 May 2004 - 03:28 PM

Ive tried to follow the instructions for removing this POS from my computer but the fixes dont seem to work for ME (I know it sucks) any help would be most appreciated. thanks in advance.

#2 rand1038

rand1038

    Advanced Member

  • Retired Staff
  • PipPipPip
  • 105 posts

Posted 21 May 2004 - 11:14 PM

We need to see a hijack this log.

Do not fix anything displayed in the Hijack This window until you are advised to, much of what it shows isn't malware and may even be necessary for proper functioning of your computer.

Download HijackThis.

Unzip it to a convenient folder (not to a temp folder), double click HijackThis.exe, and hit Scan.

When the scan is finished, the Scan button will change into a Save Log button, click it.

Save the log to a convenient location then copy and paste the complete contents(<ctrl>+<A> then <ctrl>+<c>)as a reply to this thread.

You don't have to unzip that version, just create a new folder, name it HJT and put HijackThis.exe in there, then run it.

Edited by rand1038, 21 May 2004 - 11:28 PM.


#3 zeke0123

zeke0123

    Member

  • Full Member
  • Pip
  • 7 posts

Posted 21 May 2004 - 11:34 PM

Opps posted in wrong one here it is.Logfile of HijackThis v1.97.7
Scan saved at 9:34:03 PM, on 5/21/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\STARTUPMONITOR.EXE
C:\PROGRAM FILES\COMMON FILES\REAL\UPDATE_OB\REALSCHED.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\PROGRAM FILES\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\SPYDETECTOR\SPYMONITOR.EXE
C:\PROGRAM FILES\TROJANHUNTER 3.8\THGUARD.EXE
C:\PROGRAM FILES\CACHEMAN\CACHEMAN.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\PROGRAM FILES\TDS3\TDS-3.EXE
C:\WINDOWS\MSAGENT\AGENTSVR.EXE
C:\WINDOWS\WUAUCLT.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\TDS3\EXT.PLUG\INTERO.EXE
C:\WINDOWS\DESKTOP\HJT\HIJACKTHIS.EXE

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [Run StartupMonitor] StartupMonitor.exe
O4 - HKLM\..\Run: [MSConfigReminder] C:\WINDOWS\SYSTEM\msconfig.exe /reminder
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Ad-aware] "C:\PROGRAM FILES\LAVASOFT\AD-AWARE 6\AD-AWARE.EXE" +c
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [AntiSpyMonitor] C:\Program Files\SpyDetector\spymonitor.exe
O4 - HKLM\..\Run: [THGuard] "C:\PROGRAM FILES\TROJANHUNTER 3.8\THGUARD.EXE"
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKCU\..\Run: [Cacheman] C:\PROGRA~1\CACHEMAN\Cacheman.exe
O4 - HKCU\..\Run: [SpySweeper] C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe /0
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/s...nfo/webscan.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai...all/xscan53.cab

#4 rand1038

rand1038

    Advanced Member

  • Retired Staff
  • PipPipPip
  • 105 posts

Posted 22 May 2004 - 12:40 AM

Are you using the trial version of Spydetector or have you paid for it? It appears dubious. If you haven't paid for it then I recommend uninstalling it. Spybot S&D should serve you well.

The title of the thread is about:blank but I do not see evidence of it in your log. What problems are you having?

Edited by rand1038, 22 May 2004 - 12:41 AM.


#5 zeke0123

zeke0123

    Member

  • Full Member
  • Pip
  • 7 posts

Posted 22 May 2004 - 06:54 AM

yes it seems gone for now but im sure it will be back I ran a bunch of scanner in safe mode and it been gone for a few reboots but it will be back. Ive had all the symptoms.

#6 rand1038

rand1038

    Advanced Member

  • Retired Staff
  • PipPipPip
  • 105 posts

Posted 22 May 2004 - 12:08 PM

Ok, when it comes back don't run any scans to fix anything just post the HijackThis log in this thread and I'll get back to you .




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button