(Solved) My HJT Log: Surfsidekick3 Tutorial

Home > My Hjt > My HJT Log: Surfsidekick3

My HJT Log: Surfsidekick3

So, i went to HiJack this! Contacts About Web User Contact Us Advertising Info Top 10 Website - HitWise 2008 Follow Web User on Twitter Join the Web User Facebook group Watch the Web User Youtube channel Site Changelog Community Forum Software by IP.Board Sign In Use Facebook Use Twitter Need an account? Attempting to delete: C:\WINDOWS\system32\dn8s01l7e.dll C:\WINDOWS\system32\dn8s01l7e.dll Deleted successfully!

If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. Cookiegal, Aug 3, 2006 #2 Likeatalltree Thread Starter Joined: Jun 29, 2006 Messages: 305 Here's my logfile Logfile of HijackThis v1.99.1 Scan saved at 12:12:50 AM, on 8/5/2006 Platform: Windows XP BleepingComputer is being sued by Enigma Software because of a negative post of SpyHunter. SURFSIDEKICK 3 CANT BE TERMINATED! https://www.bleepingcomputer.com/forums/t/31850/my-hjt-log-surfsidekick3/

Attempting to delete: C:\System Volume Information\_restore{B6387AD4-48E1-4511-AA40-A245D4C401AE}\RP12\A0003185.dll C:\System Volume Information\_restore{B6387AD4-48E1-4511-AA40-A245D4C401AE}\RP12\A0003185.dll Deleted successfully! Put a check by Create a desktop icon then click Next again. If an infected files are found you will be given the option to reboot your PC - select Yes to do so.

Removing: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\App Management Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{376F79A3-2CA4-4734-8C28-9758F5766B04}" HKCR\Clsid\{376F79A3-2CA4-4734-8C28-9758F5766B04} Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{0500E434-44F0-43DA-9B23-A15F7CDBAC50}" HKCR\Clsid\{0500E434-44F0-43DA-9B23-A15F7CDBAC50} Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{60FB78C3-C868-4A0C-ADC4-C3A275309313}" HKCR\Clsid\{60FB78C3-C868-4A0C-ADC4-C3A275309313} Restoring Windows certificates. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log. Replaced hosts file with default windows hosts file Restoring SeDebugPrivilege for Administrators - Succeeded Logfile of HijackThis v1.99.1 Scan saved at 12:15:02 AM, on 8/6/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) C:\WINDOWS\system32\eps.dll Infected!

Copyright Dennis Publishing 2010, All rights reserved Back To Microsoft Windows Forum Project1 virus please help. To do this, press the F8 key repeatedly as the computer starts up until you see a menu screen (if Windows starts normally, restart it again). Please start a New Thread if you're having a similar issue.View our Welcome Guide to learn how to use this site. https://forums.spybot.info/showthread.php?3521-SurfSideKick3 proud member since 2004Most active in: Resolved or inactive Malware Removal Back to top #4 jw50 jw50 Forum Deity Retired Staff 18,969 posts Posted 29 July 2005 - 09:39 PM Due

Hjt log: Logfile of HijackThis v1.99.1 Scan saved at 7:26:14 PM, on 7/23/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe This site is completely free -- paid for by advertisers and donations. Instructions can be found here. 2) Go to Start > Control Panel > Add/Remove Programs and remove the following: Zeno Search Assistant removal Enhanced Ads by Zeno removal Surf SideKick 3) It is free.

I can't get rid of SurfSideKick 3 no matter what. Thanks, Jacee Edited by Jacee, 27 August 2005 - 03:24 PM. Download Qoofix.zip by RubbeR DuckY from one of the following locations and save it to your Desktop:

    [*] http://www.malwarebytes.org/Qoofix.zip[*] http://www.besttechie.net/tools/Qoofix.zip[/list] You will then need to unzip Qoofix before you run Other than that file I want you to check and a few non urgent items below it looks good.

    C:\WINDOWS\unwn.exe will be deleted on reboot! Stay logged in Sign up now! exe O2 - BHO: (no name) - {E5E2A3E7-00FE-4D31-A030-A10799DDCA66} - (no file) O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file) O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Here is a new HJT log...

    C:\System Volume Information\_restore{B6387AD4-48E1-4511-AA40-A245D4C401AE}\RP13\A0003290.dll Infected! So, i then downloaded Killbox and still nothing. Advertisement Likeatalltree Thread Starter Joined: Jun 29, 2006 Messages: 305 All of the above listed are folders under my program files folder. Use the arrow keys to highlight "Safe Mode" and press Enter.Run HijackThisClick on scan and put a check on the following lines, if they are still thereR3 - URLSearchHook: (no name)

    Show Ignored Content As Seen On Welcome to Tech Support Guy! Is this normal? AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help!

    Several functions may not work.

    Register now! Keep it all in one thread; it gets too confusing when you jump around Thanks, Jacee MS - MVP Consumer Security 2006 thru 2016 Back to top Back to Solved Malware Also, there are no signs of an update of either XP or Internet Explorer. C:\WINDOWS\system32\xlwfdv.exe will be deleted on reboot!

    Register now to gain access to all of our features, it's FREE and only takes one minute. Attempting to delete: C:\System Volume Information\_restore{B6387AD4-48E1-4511-AA40-A245D4C401AE}\RP11\A0003068.dll C:\System Volume Information\_restore{B6387AD4-48E1-4511-AA40-A245D4C401AE}\RP11\A0003068.dll Deleted successfully! C:\WINDOWS\system32\yqunncv.exe will be deleted on reboot! Reboot into normal windows.

    Quote:R3 - URLSearchHook: (no name) - _{02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file)R3 - URLSearchHook: (no name) - {02EE5B04-F144-47BB-83FB-A60BD91B74A9} - (no file) O4 - HKLM\..\Run: [sswbd210] RUNDLL32.EXE w0023f79.dll,n 002bd20e0000000a0023f79 O23 - Service: ANIWZCSd Service Continue to follow the rest of the prompts from there. Back to top Back to Resolved or inactive Malware Removal 1 user(s) are reading this topic 0 members, 1 guests, 0 anonymous users Reply to quoted postsClear SpywareInfo Forum → everytime i turn on my computer, though, it says there is a new update, even if it's 5 minutes later.

    Post Information Total Posts in this topic: 5 postsUsers browsing this forum: No registered users and 36 guests You cannot post new topics in this forum You cannot reply to topics