Jump to content


Photo

Seachbar


  • Please log in to reply
4 replies to this topic

#1 Zer0Mercy

Zer0Mercy

    Member

  • New Member
  • Pip
  • 4 posts

Posted 26 May 2004 - 04:29 PM

I got this search bar attached to my Taskbar...but everytime I disable it when i restart my computer its there again !!! heres a screenshot:


http://www.imagedump...ck=get&tp=76715

Heres my log thing..


Logfile of HijackThis v1.97.7
Scan saved at 5:10:34 PM, on 5/26/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\pctspk.exe
C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
C:\WINDOWS\sysupd.exe
C:\Program Files\QuickTime\qttask.exe
C:\TinyKeyCounter\KeyCount.exe
C:\Program Files\teamspeak2_RC2\TeamSpeak.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\Program Files\Xfire\Xfire.exe
C:\Documents and Settings\Zach\Desktop\Crap\PathfinderET.exe
C:\Documents and Settings\Zach\Desktop\hijackthis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sharempeg.com/find/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.search-2003.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sharempeg.com/find/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.sharempeg.com/find/
F2 - REG:system.ini: UserInit=C:\Windows\System32\wsaupdater.exe,
O2 - BHO: (no name) - {000006B1-19B5-414A-849F-2A3C64AE6939} - C:\WINDOWS\bi.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: winlink module - {6CC1C91A-AE8B-4373-A5B4-28BA1851E39A} - C:\Documents and Settings\Ryan\Application Data\winlink\winlink.dll
O2 - BHO: (no name) - {71ED4FBA-4024-4bbe-91DC-9704C93F453E} - (no file)
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE
O4 - HKLM\..\Run: [SysUpd] C:\WINDOWS\sysupd.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - Startup: Shortcut to KeyCount.exe.lnk = C:\TinyKeyCounter\KeyCount.exe
O4 - Startup: TeamSpeak 2 RC2.lnk = C:\Program Files\teamspeak2_RC2\TeamSpeak.exe
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: AIM (HKLM)
O9 - Extra button: Real.com (HKLM)
O9 - Extra button: FlashGet (HKLM)
O9 - Extra 'Tools' menuitem: &FlashGet (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O10 - Broken Internet access because of LSP provider 'xfire_lsp_6390.dll' missing
O13 - WWW Prefix: http://ehttp.cc?
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macr...director/sw.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupd...38086.671087963
O16 - DPF: {A7798D6C-C6B5-4F26-9363-F7CDBBFFA607} (download Class) - http://www.gigex.com...eeddelivery.dll
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class) - http://fdl.msn.com/z...s/heartbeat.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.ma...ash/swflash.cab



Anyone Have any Ideas?


-Zer0

Edited by Zer0Mercy, 26 May 2004 - 04:34 PM.


#2 Zer0Mercy

Zer0Mercy

    Member

  • New Member
  • Pip
  • 4 posts

Posted 26 May 2004 - 04:48 PM

Anyone?

#3 Zer0Mercy

Zer0Mercy

    Member

  • New Member
  • Pip
  • 4 posts

Posted 26 May 2004 - 06:52 PM

bump

#4 Zer0Mercy

Zer0Mercy

    Member

  • New Member
  • Pip
  • 4 posts

Posted 26 May 2004 - 10:04 PM

BUMP, THIS THING IS DRIVING ME NUTZ !!! pls help..

#5 superbratkidde

superbratkidde

    Member

  • Full Member
  • Pip
  • 35 posts

Posted 26 May 2004 - 10:11 PM

tried cleaning it with anything like spybot s&d or anythin like it?
Also check where it came from and do a google search of the company some of them do provide uninstallers.
good luck




1 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users


    Yahoo (1)
Member of ASAP and UNITE
Support SpywareInfo Forum - click the button