Author Topic: Spyware problem  (Read 351 times)

Offline ryandonn

  • Newbie
  • *
  • Posts: 1
  • Karma: +0/-0
    • View Profile
Spyware problem
« on: December 13, 2005, 05:36:15 PM »
I got a nasty spyware program and I think it's gone but I was going through my Hijackthis log and I didn't know what these the bolded .exe's were:

Logfile of HijackThis v1.99.1
Scan saved at 5:25:48 PM, on 12/13/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\BCMSMMSG.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Common Files\Dell\EUSW\Support.exe
C:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exe
C:\Program Files\McAfee.com\VSO\mcvsshld.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe
C:\Program Files\McAfee.com\VSO\oasclnt.exe
C:\WINDOWS\d3vi32.exe
C:\Program Files\iTunes\iTunesHelper.exe
c:\program files\mcafee.com\agent\mcdetect.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\d3ty32.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Comcast\COMCAS~1\data\Xtras\mssysmgr.exe
C:\PROGRA~1\DELLSU~1\DSAgnt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe
C:\DOCUME~1\RYANDO~1\LOCALS~1\Temp\Rar$EX00.234\HijackThis.exe

O4 - HKLM\..\Run: [d3ty32.exe] C:\WINDOWS\system32\d3ty32.exe
O23 - Service: Network Security Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\d3vi32.exe


any help would be appreciated...

Offline guestolo

  • Site Donator
  • Administrator
  • Hero Member
  • *****
  • Posts: 16034
  • Karma: +1/-0
    • View Profile
    • http://
Spyware problem
« Reply #1 on: December 13, 2005, 07:49:38 PM »
I need to see the whole log ryandonn
Oh, and welcome

Can you do this please
Open Hijackthis.exe and do a System scan and save logfile
When the text file opens
Click EDIT, in the top menu bar
SELECT ALL>>
Then click EDIT>>COPY

Come back here and paste that whole log please

Do you want to post your own logs from FRST?

Follow the instructions posted http://www.thetechguide.com/forum/index.php/topic/22942-please-read-how-to-post-logs-from-frst/\'>Click Here


Offline moneymike

  • Newbie
  • *
  • Posts: 4
  • Karma: +0/-0
    • View Profile
    • http://
Spyware problem
« Reply #2 on: December 13, 2005, 08:17:27 PM »
if u can still get online, dl Ad-Aware and Spybot Search and Destroy just to make sure that this spyware isnt still in you computer's system. If it is, then this should detect it and if not delete it, then give u some more options.