Jump to content

christopher

Member
  • Posts

    198
  • Joined

  • Last visited

  • Donations

    0.00 USD 
  • Country

    United States

Posts posted by christopher

  1. also what's up with this NARUTO CLONE?

    i recently did a adaware scan and it seemed to get stuck on some naruto clone... and i got a message on myspace from another user having to do with naruto clone too.

    as for the latest hijackthis log.. here you go..

    Logfile of HijackThis v1.99.1

    Scan saved at 8:43:54 PM, on 3/5/2007

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.6000.16414)

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Ahead\InCD\InCDsrv.exe

    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

    C:\Program Files\Alwil Software\Avast4\ashServ.exe

    C:\Program Files\Common Files\LightScribe\LSSrvc.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe

    C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe

    C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe

    C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe

    C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe

    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

    C:\WINDOWS\System32\ezSP_Px.exe

    C:\Program Files\Microsoft IntelliPoint\point32.exe

    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

    C:\Program Files\Ahead\InCD\InCD.exe

    C:\Program Files\AIM95\aim.exe

    C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\WINDOWS\notepad.exe

    C:\WINDOWS\explorer.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Documents and Settings\christopher\Desktop\c\Anti-Malware Full\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\System32\igfxtray.exe

    O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe

    O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe

    O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"

    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

    O4 - HKCU\..\Run: [sTYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide

    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl

    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe

    O11 - Options group: [iNTERNATIONAL] International*

    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1161395254515

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1161395242343

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe

    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe

    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

    O23 - Service: VAIO Media Music Server (Application) (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (Application) (file missing)

    O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)

    O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe

    O23 - Service: VAIO Media Photo Server (Application) (VAIOMediaPlatform-PhotoServer-AppServer) - Unknown owner - C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe

    O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing)

    O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe

    O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe

    ALSO IF YOU GUYS FIND ANYTHING NEW TELL ME HOW TO GET RID OF IT FOR GOOD not just temporarily.

  2. it doesn't show up in the add/remove files in my control panel.

    i'm convinced this is the problem to all of my problems. i still get popups no matter what and they're always IE, and avast keeps finding stuff from time to time no matter what i do. boot scans, and all the malware prevention stuff that i run. so i figured if it doesnt exist anymore how can anything possibly affect it!

    how do i delete internet explorer for good?

  3. well last summer we bought a digicam to video a lot of our vacation..

    now the files on the mini dvdiscs are .VRO files and i can play them on my computer with windvdplatinum i forget what version but i like it anyways

    how do i convert those files to something else? i havent been able to find anything that i can successfully convert them with.

    i would like to eventually put together a dvd of everything one day after successful editing.. (which i obv. cant do either cause i cant edit a .vro since i cant convert it to anything else editable)

    and please dont say "just rename the files!" people have told me this before and this isnt the answer. and if it is and im just a fool that is doing it completely wrong please guide me step by step on how to do it .

    thanks for any help..

    keep in mind i dont have the sony handicam anymore just the mini discs w the footage on them

    below is a pic of what the (one of them on a disc) folder looks like that holds the contents of the video

    http://img488.imageshack.us/img488/3666/untitled2copyfx5.jpg

  4. after i press F8 and select windows xp home edition (my only option) here are my choices

    Safe Mode

    Safe Mode w/ Networking

    Safe Mode w/ Command Prompt

    Enable something Logging

    Enable VGA mode

    Last Known Good Configuration

    Dir. Serv. Resore Mode

    Debugging Mode

    Disable Auto Restart

    and back to the OS menu screen

    i dont know how to get to use Avast from there

  5. "Update all the programs you're going to scan with, then unplug and reboot into safe mode. Scan at boot time with avast (delete all found) and when you're in Windows, run the rest of the scans."

    OK im not the quickest with computer lingo, what do you mean by scan at boot time?

    in safe mode im in windows.. so boot time would be before that, so how do i run a scan at boot time?

    all of my programs are up to date as of yesterday.

  6. ALSO, since as soon as i restart my comp im automatically connected to the internet.. should i disable/unplug my DSL while doing all these scans? will that help?

    and as my last posting on this in another thread on this forum, i was instructed to go into safemode and run these apps... now i'm having an issue with safemode altogether.. it just doesnt seem to load up properly and i cant really do anything once i get there like usual... i have to turn off the whole powerswitch just to get my PC back to where im at now

    and, my safemode has always been screwed up since i got this PC... its like everything is zoomed in x 300%, and i only get the top 3/4 of the screen showing, and the bottom 1/4 is a black bar.

  7. i'm still having issues. a little less since im on firefox lately, but still issues arise.

    also, avast seems to catch trojans and other stuff a couple times a day.. and its always recommended that i 'move to chest'.

    what does that actually do? why is the recommended option not "delete"?

    i even did microtrends housecall again the other day, took a while, but it found a bunch of stuff..

    maybe i'm missing one KEY thing that keeps putting itself back on my pc.. everytime i run all these scans they always find something, but not everything apparently.. unless something keeps re-installing itself.. if that makes sense.

  8. now this current firefox is just a lagging piece of junk!

    no pop ups for the time being, but a total lag!!

    a had a nice couple years of problems free. then october/november came, then i seemed to have cleared up that mess.. now it's february and i feel like i'm in mess city again!

    i never had any problems on a compaq presario back in 1995, lol.

  9. well, it seems that internet explorer is the problem yet again. as it was the first time, but this time around i have the new ie 7.0 and sp2.

    i've tried everything in this thread. deletion, running programs, everything, and the problem still occurs with IE.

    right now i'm on firefox 2 and i havent had any problems, but i still prefer IE!! go figure.

    anyways, any other solution to my problem? since it still exists, im just avoiding it now by using another browser.

    also, how do i get myspace pages to look normal like they do in IE? (in firefox all of the pages get stretched out and they're a complete mess... i'm aware most are a MESS to begin with.. but its giving me a whole different view most of the time)

  10. O4 - HKLM\..\Run: [hgkudpg.dll] C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\christopher\Local Settings\Application Data\hgkudpg.dll",qoavije

    This is the source of your problem. You can navigate to C:\Documents and Settings\christopher\Local Settings\Application Data\ and locate hgkudpg.dll. Attempt to delete the file manually. If you can not, use Unlocker to delete the file.

    I also split your topic to help avoid some confusion since this is a new HijackThis log for a separate problem. :)

    thanks. i dont like clutter much myself so i just kept my post in the previous one just in case.

    i actually CAN'T navigate to where you're directing me above.

    i can go to C: documents & settings, christopher, then the next step is local settings and i dont have it there.

    so anyways, i just ran hijackthis again and did the whole 'fix' function on that hgkudpg.dll there. does this solve the problem just as well?

    also, as someone stated above about something putting it there, is that what i have to go after? (and how)

  11. alright.. many months later.. new ie explorer, sp2 and all..

    all previous fixes were made, now i'm getting these popups whenever i go to any website that open in a new browser window (not tabbed) -- just by coming here i get a random popup.. something to clean my computer, or cell phone ringtones and so forth..

    i've run everything, adaware, and everything provided in the malware prevention package from tarun's site.. still no stoppage.

    here is my new hijackthis logfile if it helps

    Logfile of HijackThis v1.99.1

    Scan saved at 5:45:46 PM, on 2/5/2007

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\csrss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Ahead\InCD\InCDsrv.exe

    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

    C:\Program Files\Alwil Software\Avast4\ashServ.exe

    C:\Program Files\Yahoo!\Antivirus\ISafe.exe

    C:\Program Files\Common Files\LightScribe\LSSrvc.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe

    C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe

    C:\WINDOWS\System32\wdfmgr.exe

    C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe

    C:\Program Files\Yahoo!\Antivirus\VetMsg.exe

    C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe

    C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe

    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

    C:\WINDOWS\System32\alg.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\System32\hkcmd.exe

    C:\WINDOWS\System32\ezSP_Px.exe

    C:\PROGRA~1\Yahoo!\YOP\yop.exe

    C:\Program Files\Microsoft IntelliPoint\point32.exe

    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

    C:\Program Files\Ahead\InCD\InCD.exe

    C:\Program Files\TGTSoft\StyleXP\StyleXP.exe

    C:\Program Files\AIM95\aim.exe

    C:\PROGRA~1\Yahoo!\browser\ycommon.exe

    C:\WINDOWS\system32\drwtsn32.exe

    C:\WINDOWS\system32\drwtsn32.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Documents and Settings\christopher\Desktop\c\Anti-Malware Full\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/

    O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\ycomp5_6_2_0.dll

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\System32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe

    O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe

    O4 - HKLM\..\Run: [VAIO Recovery] C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe

    O4 - HKLM\..\Run: [QuickFinder Scheduler] "C:\Program Files\Corel\WordPerfect Office 2002\Programs\QFSCHD100.EXE"

    O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe

    O4 - HKLM\..\Run: [YOP] C:\PROGRA~1\Yahoo!\YOP\yop.exe /autostart

    O4 - HKLM\..\Run: [intelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"

    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [inCD] C:\Program Files\Ahead\InCD\InCD.exe

    O4 - HKLM\..\Run: [hgkudpg.dll] C:\WINDOWS\system32\rundll32.exe "C:\Documents and Settings\christopher\Local Settings\Application Data\hgkudpg.dll",qoavije

    O4 - HKLM\..\RunOnce: [spybotDeletingA8428] command /c del "C:\WINDOWS\system32\vqmvywlq.dll_tobedeleted_old"

    O4 - HKLM\..\RunOnce: [spybotDeletingC5191] cmd /c del "C:\WINDOWS\system32\vqmvywlq.dll_tobedeleted_old"

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [sTYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide

    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl

    O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe

    O4 - HKCU\..\RunOnce: [spybotDeletingB5581] command /c del "C:\WINDOWS\system32\vqmvywlq.dll_tobedeleted_old"

    O4 - HKCU\..\RunOnce: [spybotDeletingD6738] cmd /c del "C:\WINDOWS\system32\vqmvywlq.dll_tobedeleted_old"

    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM95\aim.exe

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

    O11 - Options group: [iNTERNATIONAL] International*

    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll

    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1161395254515

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1161395242343

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

    O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\ISafe.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe

    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

    O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exe

    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\PROGRA~1\COMMON~1\SONYSH~1\AVLib\Sptisrv.exe

    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

    O23 - Service: VAIO Media Music Server (Application) (VAIOMediaPlatform-MusicServer-AppServer) - Unknown owner - C:\Program Files\Sony\VAIO Media Music Server\SSSvr.exe" /Service=VAIOMediaPlatform-MusicServer-AppServer /DisplayName="VAIO Media Music Server (Application) (file missing)

    O23 - Service: VAIO Media Music Server (HTTP) (VAIOMediaPlatform-MusicServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\sv_httpd.exe" /Service=VAIOMediaPlatform-MusicServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\MusicServer\HTTP (file missing)

    O23 - Service: VAIO Media Music Server (UPnP) (VAIOMediaPlatform-MusicServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe

    O23 - Service: VAIO Media Photo Server (Application) (VAIOMediaPlatform-PhotoServer-AppServer) - Unknown owner - C:\Program Files\Sony\Photo Server 20\appsrv\PicAppSrv.exe

    O23 - Service: VAIO Media Photo Server (HTTP) (VAIOMediaPlatform-PhotoServer-HTTP) - Unknown owner - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-PhotoServer-HTTP /RegRoot="Software\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\PhotoServer\HTTP (file missing)

    O23 - Service: VAIO Media Photo Server (UPnP) (VAIOMediaPlatform-PhotoServer-UPnP) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Media Platform\UPnPFramework.exe

    O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\Yahoo!\Antivirus\VetMsg.exe

×
×
  • Create New...