Options

Hsa Wont Leave Me Alone!

Unknown
edited January 2005 in Spyware & Virus Removal
Hi gang. I have been back and forth from this forum sor well over a week. I have found your descriptions and procedures for removing this nasty little parasite truely beneficial - I get what you are saying and how to do it. I have never used such a site or such a forum before - let alone understood so much about these 'buggars'. Look, I have waited a long time before posting thinking that i would be able to use the removal guides and programs to eliminate this thing. I have noticed how helpful you are and as such, Iw oul like to make this post.
It started when i first got this computer in april/may. As soon as I went online, I must have downladed this HSA. I noticed it on my mums comp and just deleted it and figured it would be the same for me when I noticed it last week. You see I have been offline for about 6 months (my wife is very sick) and only just went back online last week when hey-presto a XXX-dialer came up. Now this has happened before and I have just deleted it. Ha now I know better.
So I stumbled on your forum, downloaded Ad-Aware, Hijack-This, Spybot, HSremove, About:Buster, spyware scanner and even bought something from the local comp shop.
I followed Dexters guide to the 'T' and the *really want to put in a swear/cuss word here* parasite wont leave.I would much appreciate your wise words.

Thanks

Logfile of HijackThis v1.97.7
Scan saved at 11:07:29 AM, on 3/01/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\crmg32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\DSentry.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Lexmark X5100 Series\lxbabmgr.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Lexmark X5100 Series\lxbabmon.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Documents and Settings\Jason Wilson\Desktop\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe

O2 - BHO: (no name) - {9005B7E4-713A-68F7-DA3A-3B9C0B2AC5EB} - C:\WINDOWS\system32\wintl32.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A

Comments

  • dubblu
    edited January 2005
    The one thing that keeps re-appearing, even afte hard re-boot, deletion and what ever is the BHO-No Name entry, its that one that keeps changing its name. No other RO R1 - R4 ones come back.

    Thanks

    PS - I am using Firefox (which is great by the way) as my explorer, should I use IE?
  • SpywareShooterSpywareShooter 127.0.0.1
    edited January 2005
    Please post your full log. I am sorry I didn't get to your post sooner.
Sign In or Register to comment.