My Anti Spyware

I've followed the instructions on how to remove this bugger, but I did not find these:

O4 - HKLM\..\Run: rundll32.exe “C:\WINDOWS\system32\****.dllâ€

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:11:30, on 24/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Ann's laptop\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wm ... Ojg5&lid=2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - ...

hey, i had this problem yesterday .. and followed your guide
http://www.myantispyware.com/2007/11/18 ... hijackers/

vundofix found about 5 dlls and one dat. deleted all dll's but had problem to delete the dat, even after reboot. So i checked ComboFix but no avail - i got a message "this copy of combofix has expired. / please download an updated copy" and ComboFix deleted itself right away.

Next Step - using ...

Hello,
Unfortunately I got this this annoying spyware or wharever it is.
I did all by the guide until I got to the part when you have to start HijackThis. After I did start it and turn on the scan I couldn't find these lines:


R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
O2 - BHO: MSVPS System - {480598DD-AE28-48B7-82F7-6ADDA1AA6B66} - C:\WINDOWS\ntspkfxt.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: The htunistock ...

I have gotten this on my machine and McAfee won't even remove it. How do I get rid of it? I downloaded HijackThis, but don't want to go and remove registry settings without know for sure which ones to remove. Is there anything I can provide that would help figure this out.

Thanks

Hi there, I'm having a huge headache problem with spyware trojan pop-ups.

The symptoms are almost identical to the antispywarebox hijacker spyware that's listed here http://www.myantispyware.com/2006/06/12 ... -hijacker/

I am getting constant messages from my taskbar, but a couple of the messages are slightly different... i.e. instead of the message

"Alert: A minimum of 7 spyware entries found"

the message says "Alert: A minimum of 12 spyware entries found" ...

please help tried loads

my 14yr old son clicked on a free games popup and has now got mbs on his computer, i have tried, spybot, prevx loadds but cannot get rid of it

have just done a hijack this log on his laptop (nnot used before)

please help here it is

Logfile of HijackThis v1.99.1
Scan saved at 14:44:38, on 12/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running ...

Logfile of HijackThis v1.99.1
Scan saved at 17:14:47, on 24/01/2002
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Thomson\SpeedTouch ...

Hi, I wonder if anyone can help me?

Got a pain of a pop-up problem - MBS Account Manager - asking me to pay for something all the time.

I have tried to download Brute Force Uninstaller (I am a complete novice :( ) and I get to a window that asked me to put in the "scriptfile to execute" ?? I have no idea what this ...

Hello Patrik ... could you examine this for me please

Thanks

-------------------
Logfile of HijackThis v1.99.1
Scan saved at 10:38:04 PM, on 20/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NvMixerTray.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Program Files\Common ...