Jump to content


Photo

Spyware lockups: Int. Exp., Wind. Exp., CD Creat.


  • Please log in to reply
9 replies to this topic

#1 ArizonaHiker

ArizonaHiker

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 17 July 2004 - 07:44 PM

For the past several weeks, I have been trying to rid my system of all the spyware that I was infested with after just one night of trying Kazaa. I have run HijackThis, Spybot, and Ad-Aware and have gotten rid of most of the problems, but I am still experiencing the following symptoms:

1. Windows Explorer locks up when browsing files. Windows Explorer will often lock up or crash after browsing thirty or forty JPG files (opening/viewing them in Internet Explorer).

2. Internet Explorer often locks up when viewing JPG files. Will also open JPG file as a blank page (all white space), or with distorted or clipped video. (JPGs sometimes look like a TV screen with the horizontal or vertical hold out of sync.)

3. My CD burning software, Adaptec Easy CD Creator 4, now locks up every time I try to burn a CD.

4. I sometimes get a message when running Windows 98 which says that Windows has encountered a problem with the registry which it will fix and then restart (which it then proceeds to do).

I have gone through the steps in the SpywareInfo FAQ and am still experiencing the above symptoms. I am posting my HijackThis log in the hopes that you can help me find what is still causing these problems on my system. If I can't clear up these problems soon, I am seriously considering re-installing Windows 98, but I hope I can avoid going that far.

PLEASE HELP!!!
Jim
Phoenix, AZ

NOTE: My original and most severe spyware symptoms were a startup page hijacking (to a bogus spyware-removal software ad site, http://default-homep...t.cgi?new-hkcu) accompanied by an internet connection disconnect after about 5 minutes. These symptoms were cleared by running HijackThis and are no longer present.

--------------------------------
Logfile of HijackThis v1.97.7
Scan saved at 5:15:12 PM, on 7/16/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\PROGRAM FILES\EARTHLINK TOTALACCESS\ACCELERATOR\PROPELAC.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 4\CREATECD\CREATECD.EXE
C:\PROGRAM FILES\EARTHLINK TOTALACCESS\TASKPANL.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\NOTEPAD.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:8080
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: EarthLink Popup Blocker - {4B5F2E08-6F39-479a-B547-B2026E4C7EDF} - c:\Program Files\EarthLink TotalAccess\PnEL.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Pop-Up Blocker - {D7F30B62-8269-41AF-9539-B2697FA7D77E} - c:\Program Files\EarthLink TotalAccess\PnEL.dll
O4 - HKLM\..\Run: [ScanRegistry] c:\windows\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] c:\windows\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [Propel Accelerator] C:\PROGRAM FILES\EARTHLINK TOTALACCESS\ACCELERATOR\PROPELAC.EXE
O4 - HKLM\..\Run: [CreateCD] C:\PROGRA~1\ADAPTEC\EASYCD~1\CREATECD\CREATECD.EXE -r
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [E6TaskPanel] "C:\PROGRAM FILES\EARTHLINK TOTALACCESS\TASKPANL.EXE" -winstart
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Refresh Pa&ge with Full Quality - c:\Program Files\EarthLink TotalAccess\Accelerator\\pac-page.html
O8 - Extra context menu item: Refresh Pi&cture with Full Quality - c:\Program Files\EarthLink TotalAccess\Accelerator\\pac-image.html
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O12 - Plugin for .mp3: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin3.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macr...ash/swflash.cab
O19 - User stylesheet: (file missing)

#2 ArizonaHiker

ArizonaHiker

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 18 July 2004 - 01:59 AM

bump

#3 toto50

toto50

    Member

  • New Member
  • Pip
  • 2 posts

Posted 18 July 2004 - 03:09 AM

Allo,

I got this same problem with Kazaa.

I try to resolve the probleme with scandisk, defrag c:, i use huntertrojan,
Cswshredder, Hijackthis and Ad-aware 6.0 but the problem is always there.

I cant use restore system.

If you resolve your problem, please, send me your help.

Thanks


e-mail: nantanm@yahoo.ca

#4 ArizonaHiker

ArizonaHiker

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 18 July 2004 - 03:33 AM

toto50,

Sorry to hear you're having the same problems!

Which of my four symptoms (Win Exp, Int Exp, CD Burn, registry problem) are you experiencing? If we can narrow it down to specific symptoms we're both experiencing, it might help someone on this board to track down the problem.

I'll let you know if I hear anything more.
Jim

P.S. You should probably edit your post to remove your e-mail address. I think spammers and others troll here looking for e-mail addresses.

Edited by ArizonaHiker, 18 July 2004 - 03:36 AM.


#5 toto50

toto50

    Member

  • New Member
  • Pip
  • 2 posts

Posted 18 July 2004 - 11:36 AM

I, Jim,


Something read my hard disk then it read my CD-WR. It jam (stop) my
PC between 1 and 15 sec., when i play on Civ3 or when i do something on my PC
Ex.: Write this repons, it jam around 15 a 20 time.

I cant use my CD-WR because it stop when i want copy a CD.


Thanks for your attention and your help



Bye

#6 ArizonaHiker

ArizonaHiker

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 18 July 2004 - 05:02 PM

bump

#7 ArizonaHiker

ArizonaHiker

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 19 July 2004 - 01:44 PM

Please help!!!

I REALLY do not want to re-install Windows 98!

Thanks,
Jim

#8 ArizonaHiker

ArizonaHiker

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 19 July 2004 - 06:57 PM

bump

#9 ArizonaHiker

ArizonaHiker

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 20 July 2004 - 07:30 PM

Is there anybody... OUT THERE???

#10 ArizonaHiker

ArizonaHiker

    Member

  • Full Member
  • Pip
  • 8 posts

Posted 21 July 2004 - 06:15 PM

[BegMode]
PLEASE HELP!!!
[/BegMode]




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button