Guest Charity Case Posted January 2, 2005 Report Share Posted January 2, 2005 is that what you meant?yep' date=' heres mine for comparison Logfile of HijackThis v1.99.0Scan saved at 17:05:08, on 02/01/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\tcpsvcs.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\wpabaln.exeC:\Program Files\foobar2000\foobar2000.exeC:\Program Files\Opera 8 Beta\Opera.exeC:\WINDOWS\system32\NOTEPAD.EXEC:\Documents and Settings\Weeze\HijackThis.exeC:\automation\Perl\bin\perl.exeO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO4 - Startup: Alcatel Speedtouch Connection.lnk = ?O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dllO9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htmO9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htmO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - [url']http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1103520428440O17 - HKLM\System\CCS\Services\Tcpip\..\{44E9CDB6-444D-4EBA-8002-7BA6DCB53CE9}: NameServer = 62.241.160.200 158.43.240.4Im just looking through yours now Quote Link to comment Share on other sites More sharing options...
Guest Charity Case Posted January 2, 2005 Report Share Posted January 2, 2005 C:\Program Files\Messenger Plus! 3\MsgPlus.exehttp://www.liutilities.com/products/wintaskspro/processlibrary/msgplus/O4 - HKLM\..\Run: [thebrowseeqfind] C:\Documents and Settings\All Users\Application Data\Show Live The Browse\Beep keep.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://web.dwzjtmxwfmpwzjjovq.com/g...YXoOGJxkbO.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.widrkhmcmwe.net/g7N_yFgT...P8Yp8wRK3E.htmlO4 - HKCU\..\Run: [meowcash] C:\DOCUME~1\Calum\APPLIC~1\STUPID~1\Dent play.exeLooks extremely dodgyrepair them using hijackthis Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted January 2, 2005 Report Share Posted January 2, 2005 cheers i'll give it a go Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted January 3, 2005 Report Share Posted January 3, 2005 i still can't get rid of them Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted January 3, 2005 Report Share Posted January 3, 2005 scratch that, anyone having a similar problem should try:http://lop.com/new_uninstall.exe Quote Link to comment Share on other sites More sharing options...
Guest HARRY Posted January 3, 2005 Report Share Posted January 3, 2005 scratch that' date=' anyone having a similar problem should try:[url']http://lop.com/new_uninstall.exeAny chance of explaing what this does before i download an executable file? Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted January 3, 2005 Report Share Posted January 3, 2005 well...i'm not quite sure, but the icons are gone nowhttp://msgplus.mybboard.com/showthread.php?tid=36163that's where i found it Quote Link to comment Share on other sites More sharing options...
Guest HARRY Posted January 3, 2005 Report Share Posted January 3, 2005 well...i'm not quite sure' date=' but the icons are gone now[url']http://msgplus.mybboard.com/showthread.php?tid=36163that's where i found itYou must have recently installed Messenger Plus or Messenger Discovery and chosen to install their sponsor programs aswell. Best bet is to avoid installing such things in the future. Remember to check your processes in task manager at startup to see if there is anything dodgy sounding in there, because there usually is. Even if they are blocked by your firewall, they are still taking up unnecessary memory and processor time, so try getting rid of them if you can Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted January 3, 2005 Report Share Posted January 3, 2005 i installed messenger plus about a month ago (maybe two months...) and i don't even know what discovery is, cheers for the advice though. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.