christopher

also what's up with this NARUTO CLONE? i recently did a adaware scan and it seemed to get stuck on some naruto clone... and i got a message on myspace from another user having to do with naruto clone too. as for the latest hijackthis log.. here you go.. Logfile of HijackThis v1.99.1 Scan saved at 8:43:54 PM, on 3/5/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16414) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\ezSP_Px.exe C:\Program Files\Microsoft IntelliPoint\point32.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Ahead\InCD\InCD.exe C:\Program Files\AIM95\aim.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\notepad.exe C:\WINDOWS\explorer.exe C:\WINDOWS\System32\svchost.exe C:\Documents and Settings\christopher\Desktop\c\Anti-Malware Full\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [sTYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe O11 - Options group: [iNTERNATIONAL] International* O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1161395254515 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1161395242343 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe O23 - Service: VAIO Media Music Server (Application) (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (Application) (file missing) O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing) O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe O23 - Service: VAIO Media Photo Server (Application) (VAIOMediaPlatform-PhotoServer-AppServer) - Unknown owner - C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing) O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe ALSO IF YOU GUYS FIND ANYTHING NEW TELL ME HOW TO GET RID OF IT FOR GOOD not just temporarily.

is what im saying sound logical? coltm4 - what is your suggestion. what did you notice in hijackthis.

it doesn't show up in the add/remove files in my control panel. i'm convinced this is the problem to all of my problems. i still get popups no matter what and they're always IE, and avast keeps finding stuff from time to time no matter what i do. boot scans, and all the malware prevention stuff that i run. so i figured if it doesnt exist anymore how can anything possibly affect it! how do i delete internet explorer for good?

well last summer we bought a digicam to video a lot of our vacation.. now the files on the mini dvdiscs are .VRO files and i can play them on my computer with windvdplatinum i forget what version but i like it anyways how do i convert those files to something else? i havent been able to find anything that i can successfully convert them with. i would like to eventually put together a dvd of everything one day after successful editing.. (which i obv. cant do either cause i cant edit a .vro since i cant convert it to anything else editable) and please dont say "just rename the files!" people have told me this before and this isnt the answer. and if it is and im just a fool that is doing it completely wrong please guide me step by step on how to do it . thanks for any help.. keep in mind i dont have the sony handicam anymore just the mini discs w the footage on them below is a pic of what the (one of them on a disc) folder looks like that holds the contents of the video http://img488.imageshack.us/img488/3666/untitled2copyfx5.jpg

after i press F8 and select windows xp home edition (my only option) here are my choices Safe Mode Safe Mode w/ Networking Safe Mode w/ Command Prompt Enable something Logging Enable VGA mode Last Known Good Configuration Dir. Serv. Resore Mode Debugging Mode Disable Auto Restart and back to the OS menu screen i dont know how to get to use Avast from there

"Update all the programs you're going to scan with, then unplug and reboot into safe mode. Scan at boot time with avast (delete all found) and when you're in Windows, run the rest of the scans." OK im not the quickest with computer lingo, what do you mean by scan at boot time? in safe mode im in windows.. so boot time would be before that, so how do i run a scan at boot time? all of my programs are up to date as of yesterday.

nice signature, cptmurphy. ;x

ALSO, since as soon as i restart my comp im automatically connected to the internet.. should i disable/unplug my DSL while doing all these scans? will that help? and as my last posting on this in another thread on this forum, i was instructed to go into safemode and run these apps... now i'm having an issue with safemode altogether.. it just doesnt seem to load up properly and i cant really do anything once i get there like usual... i have to turn off the whole powerswitch just to get my PC back to where im at now and, my safemode has always been screwed up since i got this PC... its like everything is zoomed in x 300%, and i only get the top 3/4 of the screen showing, and the bottom 1/4 is a black bar.

i'm still having issues. a little less since im on firefox lately, but still issues arise. also, avast seems to catch trojans and other stuff a couple times a day.. and its always recommended that i 'move to chest'. what does that actually do? why is the recommended option not "delete"? i even did microtrends housecall again the other day, took a while, but it found a bunch of stuff.. maybe i'm missing one KEY thing that keeps putting itself back on my pc.. everytime i run all these scans they always find something, but not everything apparently.. unless something keeps re-installing itself.. if that makes sense.

i log in as christopher w/ admin priviledges.

yea it's valid. that was helpful.

I HOPE SO. i dont see how it couldnt/wouldnt be. or circuit city is going down.

jeremy, i've done most/all of those. i'm going to retry everything in the morning in that order and see how things go. will, thanks. that'll be my last option! i'll see what i can do.

reformatting for constant pop ups? that cant be the final answer. i cant reformat anyway i dont have any of the appropriate discs and dont want to throw away photoshop and other programs i wont be able to get again unless i pay.

HAHAHAHAHA. mine doesnt work at ALL! and never has!! powerGUI is great, takes less than 10 mins.

now this current firefox is just a lagging piece of junk! no pop ups for the time being, but a total lag!! a had a nice couple years of problems free. then october/november came, then i seemed to have cleared up that mess.. now it's february and i feel like i'm in mess city again! i never had any problems on a compaq presario back in 1995, lol.

well, it seems that internet explorer is the problem yet again. as it was the first time, but this time around i have the new ie 7.0 and sp2. i've tried everything in this thread. deletion, running programs, everything, and the problem still occurs with IE. right now i'm on firefox 2 and i havent had any problems, but i still prefer IE!! go figure. anyways, any other solution to my problem? since it still exists, im just avoiding it now by using another browser. also, how do i get myspace pages to look normal like they do in IE? (in firefox all of the pages get stretched out and they're a complete mess... i'm aware most are a MESS to begin with.. but its giving me a whole different view most of the time)

this file monitor program has been running for 3 hours and is still scrolling through files how long is this supposed to take? what's the end result when it eventually stops? 1811324 is the # it's at now and it's currently paused.

well i used file assassin and typed in the location to the .dll and it said it was deleted. whether this fixes everything i dont know, i'll get back to you guys.

so does this filemon do anything when it's running? currently i have it running and it's just flying through a zillion files. what's the purpose of me having it? do i have this so i can find hgkudpg.dll?

i just deleted it via hijackthis (i believe) and the problem still exists. can i get a short explanation on what this filemon is?

i have been a member here for a looong time. time just passes by. i would've never found the great styleXP w/o msfn! ;0

This is the source of your problem. You can navigate to C:\Documents and Settings\christopher\Local Settings\Application Data\ and locate hgkudpg.dll. Attempt to delete the file manually. If you can not, use Unlocker to delete the file. I also split your topic to help avoid some confusion since this is a new HijackThis log for a separate problem. thanks. i dont like clutter much myself so i just kept my post in the previous one just in case. i actually CAN'T navigate to where you're directing me above. i can go to C: documents & settings, christopher, then the next step is local settings and i dont have it there. so anyways, i just ran hijackthis again and did the whole 'fix' function on that hgkudpg.dll there. does this solve the problem just as well? also, as someone stated above about something putting it there, is that what i have to go after? (and how)

alright.. many months later.. new ie explorer, sp2 and all.. all previous fixes were made, now i'm getting these popups whenever i go to any website that open in a new browser window (not tabbed) -- just by coming here i get a random popup.. something to clean my computer, or cell phone ringtones and so forth.. i've run everything, adaware, and everything provided in the malware prevention package from tarun's site.. still no stoppage. here is my new hijackthis logfile if it helps Logfile of HijackThis v1.99.1 Scan saved at 5:45:46 PM, on 2/5/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Ahead\InCD\InCDsrv.exe C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Yahoo!\Antivirus\ISafe.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe C:\WINDOWS\System32\wdfmgr.exe C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe C:\Program Files\Yahoo!\Antivirus\VetMsg.exe C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\hkcmd.exe C:\WINDOWS\System32\ezSP_Px.exe C:\PROGRA~1\Yahoo!\YOP\yop.exe C:\Program Files\Microsoft IntelliPoint\point32.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Ahead\InCD\InCD.exe C:\Program Files\TGTSoft\StyleXP\StyleXP.exe C:\Program Files\AIM95\aim.exe C:\PROGRA~1\Yahoo!\browser\ycommon.exe C:\WINDOWS\system32\drwtsn32.exe C:\WINDOWS\system32\drwtsn32.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\christopher\Desktop\c\Anti-Malware Full\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/ O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\ycomp5_6_2_0.dll O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE" O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe" O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [hgkudpg.dll] C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\christopher\Local Settings\Application Data\hgkudpg.dll",qoavije O4 - HKLM\..\RunOnce: [spybotDeletingA8428] command /c del "C:\WINDOWS\system32\vqmvywlq.dll_tobedeleted_old" O4 - HKLM\..\RunOnce: [spybotDeletingC5191] cmd /c del "C:\WINDOWS\system32\vqmvywlq.dll_tobedeleted_old" O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [sTYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe O4 - HKCU\..\RunOnce: [spybotDeletingB5581] command /c del "C:\WINDOWS\system32\vqmvywlq.dll_tobedeleted_old" O4 - HKCU\..\RunOnce: [spybotDeletingD6738] cmd /c del "C:\WINDOWS\system32\vqmvywlq.dll_tobedeleted_old" O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O11 - Options group: [iNTERNATIONAL] International* O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1161395254515 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1161395242343 O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\ISafe.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe O23 - Service: VAIO Media Music Server (Application) (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (Application) (file missing) O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing) O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe O23 - Service: VAIO Media Photo Server (Application) (VAIOMediaPlatform-PhotoServer-AppServer) - Unknown owner - C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing) O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe

whats the purpose of this unlocker? you make me download too much stuff ;0