My Anti Spyware

Ok so I did everything it told me to and here are the reports:

SmitFraudFix v2.266

Scan done at 17:13:56.40, Thu 12/13/2007
Run from C:\Documents and Settings\Matts\Desktop\SmitfraudFix
OS: Microsoft Windows XP - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

������������������������ SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

������������������������ Killing process


������������������������ hosts

127.0.0.1 localhost

������������������������ Winsock2 Fix

S!Ri's WS2Fix: LSP ...

I need to fix this problem and would like to know how to avoid it in the future. I am tempted to try it my self but my prior attempts failed.

So I greatly appreciate any input and help. Thank you in advance.

+++++++++++++++++++

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2007-12-10 19:08:28
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe ...

hello!
my computer was infected by numerous viruses a while ago but i managed to get rid some of them using your forum and lot of different programs! but i couldn't remove all of them.few moments ago spyware detector found these threats but i cannot delete them cus i have only trial version of a program:
adware zango, adware surf side, fake anti spyware win antivirus,adware shorty, trojan downloader, downloader spy setup, fake antispyware winfixer, ...

Hi guys,

I also have had a spyware problem and have done HJT scans and combofix....here are the results....

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:46:10, on 11/12/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
F:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
F:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
F:\PROGRA~1\Grisoft\AVG7\avgemc.exe
F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\wltrysvc.exe
F:\WINDOWS\System32\bcmwltry.exe
F:\WINDOWS\system32\wuauclt.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\rundll32.exe
F:\WINDOWS\system32\CTHELPER.EXE
F:\Program Files\Microsoft ...

hai..i wanna asking why i cant preview youtube video??...this meesage appear when i want to watch the video "Hello, you either have JavaScript turned off or an old version of Adobe's Flash Player. Get the latest Flash player." but i had on the javascript and installed new version of abobe flash player...so whats my problem? should i need to post my log?

Hi guys,

Any assistance you can provide would be appreciated!

** HijackThis Log **

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:19:57 PM, on 12/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\COMMON~1\AOL\ACS\AOLacsd.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Digidesign\Drivers\MMERefresh.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\ehome\ehtray.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\stsystra.exe
c:\program files\mcafee.com\agent\mcdetect.exe
C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
C:\WINDOWS\system32\Rundll32.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\DOCUME~1\Josh\LOCALS~1\Temp\clclean.0001
C:\Program ...

here my logfile..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:27:38 PM, on 12/6/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Video Add-on\icthis.exe
C:\Program Files\Video Add-on\isfmntr.exe
C:\Program Files\FarStone\VirtualDrive\VDTask.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Video Add-on\icmntr.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\Video Add-on\isfmm.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\Program Files\Winamp\winampa.exe
C:\Program ...

I'm brand new to the forums and I'm totally impressed with how you guys are able to decipher those log files!!

Anyway, my step-daughter's PC had gotten practically unusable due to malware and viruses. It was so bad that I had to pull the drive out and install it in my machine as a slave drive to even scan the darn thing.

So the drive has been scanned no fewer than 5 times using Kaspersky ...

I just joined the forum. I am having the same problems that other users are having with the safenavweb (security pop-ups, red screen, etc.). I think I've downloaded the files I needed and I followed the instructions to list the Hijack This scanned information below. I'd really appreciate any help you can give on getting this off my computer. Thanks in advance.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:47:19 PM, on 12/1/2007 ...

Hello,

My desktop changed to black background with red writing "Warning! Spyware threat has been detected on your PC -- underlined in red.

Then in white writing below it "Your computer has several fatal errors due to spyware activity. Your IP address is and via this address an unauthorized access was gained by another computer. It is strongly recommended to install an antispyware software to close all security vulnerabilities.

I tried following your instructions from ...