Shoutbox

Take a look at this page http://www.neowin.net/articles.php?action=more&id=81 , there's loads of tips on preventing adware/spyware gettin installed (u know it gets installed whilst surfin the web too without u knowin it, don't you?).

I followed most of the instructions/tips given an never get adware/spyware on my comp

Ok, i was looking at the Processus Tab and couldn't really figure out if anything there was extra so i took a shot of it

Click here: http://www.bbfree.com/VGProManiac/uploads/post-2-1090098721.jpg

I can't use the img tag the image is 1024*728

Now do as lopardo told you:

quote:

---

Originally posted by lopardo
Download this program, execute it and tells us what you see (CTRL+C).

---

So run that program and take a screenshot (so we can see everything that it reports)...

Damn computer! *shakes fist* i had to restart it so many times before i could get back on.... grrrr

Anyways, i had overlooked lopardo's post so i did that now, and sunshine i already read that article and i normally don't have lots of spyware, i'm guessing my brother just messed around too much .... he's gone today so if i don't get any new items found tomorrow then i'm fine

Anyways here is what the program gave me:

quote:

---

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify           
+ cscdll    Agent réseau hors connexion    Microsoft Corporation    C:\WINDOWS\system32\cscdll.dll
+ ScCertProp    DLL commune de réception des notifications Winlogon    Microsoft Corporation    C:\WINDOWS\system32\wlnotify.dll
+ Schedule    DLL commune de réception des notifications Winlogon    Microsoft Corporation    C:\WINDOWS\system32\wlnotify.dll
+ SensLogn    DLL commune de réception des notifications Winlogon    Microsoft Corporation    C:\WINDOWS\system32\wlnotify.dll
+ termsrv    DLL commune de réception des notifications Winlogon    Microsoft Corporation    C:\WINDOWS\system32\wlnotify.dll
+ wlballoon    DLL commune de réception des notifications Winlogon    Microsoft Corporation    C:\WINDOWS\system32\wlnotify.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit           
+ C:\Windows\System32\wsaupdater.exe            C:\WINDOWS\system32\wsaupdater.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell           
+ Explorer.exe    Explorateur Windows    Microsoft Corporation    C:\WINDOWS\explorer.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run           
+ Advanced Tools Check    Norton AntiVirus Advanced Tools Integrity Checker    Symantec Corporation    C:\Program Files\Norton AntiVirus\AdvTools\AdvChk.exe
+ atqhct            C:\WINDOWS\atqhct.exe
+ BootSkin Startup Jobs    Stardock BootSkin!        C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe
+ ccApp    Symantec Common Client User Session    Symantec Corporation    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
+ dibqwkrmjltp            C:\WINDOWS\system32\gwhakdld.exe
+ MessengerPlus3    Messenger Plus!    Patchou    C:\Program Files\Messenger Plus! 3\MsgPlus.exe
+ msbb    Search Assistant    180solutions, Inc.    c:\Documents and Settings\Administrateur\Local Settings\Temp\msbb.exe
+ mswspl            C:\Documents and Settings\Administrateur\Application Data\dwnupdt.exe
+ NvCplDaemon    NVIDIA Display Properties Extension    NVIDIA Corporation    C:\WINDOWS\system32\nvcpl.dll
+ RunDLL    bridge Module        C:\WINDOWS\system32\bridge.dll
+ SpeedTouch USB Diagnostics    SpeedTouch Statistics    THOMSON    C:\Program Files\Alcatel\SpeedTouch USB\dragdiag.exe
+ Zone Labs Client    Zone Labs Client    Zone Labs Inc.    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components           
+ Carnet d'adresses 6    Bibliothèque d'installation Outlook Express    Microsoft Corporation    C:\Program Files\OUTLOOK EXPRESS\setup50.exe
+ Internet Explorer    Windows NT User Data Migration Tool    Microsoft Corporation    C:\WINDOWS\system32\shmgrate.exe
+ Internet Explorer 6    Utilitaire d'installation individualisée de Internet Explorer    Microsoft Corporation    C:\WINDOWS\system32\ie4uinit.exe
+ Microsoft Outlook Express 6    Bibliothèque d'installation Outlook Express    Microsoft Corporation    C:\Program Files\OUTLOOK EXPRESS\setup50.exe
+ Microsoft Windows Media Player    Utilitaire d'installation du Lecteur Windows Media Microsoft    Microsoft Corporation    C:\WINDOWS\inf\unregmp2.exe
+ Microsoft Windows Media Player    ADVPACK    Microsoft Corporation    C:\WINDOWS\system32\advpack.dll
+ Mise à jour du Bureau Windows    Microsoft Register Server    Microsoft Corporation    C:\WINDOWS\system32\regsvr32.exe
+ NetMeeting 3.01    ADVPACK    Microsoft Corporation    C:\WINDOWS\system32\advpack.dll
+ Outlook Express    Windows NT User Data Migration Tool    Microsoft Corporation    C:\WINDOWS\system32\shmgrate.exe
+ Personnalisation du navigateur    DLL de personnalisation de Microsoft Internet Explorer    Microsoft Corporation    C:\WINDOWS\system32\iedkcs32.dll
+ Themes Setup    Microsoft Register Server    Microsoft Corporation    C:\WINDOWS\system32\regsvr32.exe
+ Windows Messenger 4.7    ADVPACK    Microsoft Corporation    C:\WINDOWS\system32\advpack.dll
C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage           
+ Adobe Gamma Loader.exe.lnk    Adobe Gamma Loader    Adobe Systems, Inc.    C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
C:\Documents and Settings\Administrateur\Menu Démarrer\Programmes\Démarrage           
+ Winwall Autostart.lnk            C:\Program Files\Winwall\Winwall.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler           
+ Démon de cache des catégories de composant    Bibliothèque de l'interface utilisateur du navigateur    Microsoft Corporation    C:\WINDOWS\system32\BROWSEUI.DLL
+ Pré-chargeur Browseui    Bibliothèque de l'interface utilisateur du navigateur    Microsoft Corporation    C:\WINDOWS\system32\BROWSEUI.DLL
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad           
+ CDBurn    DLL commune du shell Windows    Microsoft Corporation    C:\WINDOWS\system32\shell32.dll
+ PostBootReminder    DLL commune du shell Windows    Microsoft Corporation    C:\WINDOWS\system32\shell32.dll
+ SysTray    Objet du service d'environnement Systray    Microsoft Corporation    C:\WINDOWS\system32\stobject.dll
+ WebCheck    Contrôleur de site Web    Microsoft Corporation    C:\WINDOWS\system32\webcheck.dll
HKCU\Software\Microsoft\Windows\CurrentVersion\Run           
+ AutoUpdate            C:\WINDOWS\scvhost.exe
+ ctfmon.exe    CTF Loader    Microsoft Corporation    C:\WINDOWS\system32\ctfmon.exe
+ MessengerPlus3    Messenger Plus!    Patchou    C:\Program Files\Messenger Plus! 3\MsgPlus.exe
+ TuneUp MemOptimizer    TuneUp MemOptimizer    TuneUp Software GmbH    C:\Program Files\TuneUp Utilities 2004\MemOptimizer.exe
Task Scheduler           
+ Symantec NetDetect.job    Symantec NetDetect    Symantec Corporation    C:\Program Files\Symantec\LiveUpdate\NDETECT.EXE

---

quote:

---

Originally posted by Ningc_Maniac
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
+ C:\Windows\System32\wsaupdater.exe C:\WINDOWS\system32\wsaupdater.exe

---

Warning with this, it should be C:\WINDOWS\System32\userinit.exe
You need to modify your registry and be very careful, check this page

quote:

---

Originally posted by Ningc_Maniac
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ atqhct C:\WINDOWS\atqhct.exe
+ dibqwkrmjltp C:\WINDOWS\system32\gwhakdld.exe

---

This doesn't look good, looks like a virus or something, update your antivirus and do a full scan.

quote:

---

Originally posted by Ningc_Maniac
+ msbb Search Assistant 180solutions, Inc. c:\Documents and Settings\Administrateur\Local Settings\Temp\msbb.exe

---

Spyware... check this page

quote:

---

Originally posted by Ningc_Maniac
+ mswspl C:\Documents and Settings\Administrateur\Application Data\dwnupdt.exe
+ RunDLL bridge Module C:\WINDOWS\system32\bridge.dll

---

Check this page.

quote:

---

Originally posted by Ningc_Maniac
+ AutoUpdate C:\WINDOWS\scvhost.exe

---

This is surely a virus, the real one is called svchost.exe and is located under C:\Windows\System32\. Check this out.

So, the problem is you have spyware and viruses, they are slowing your PC down and are a security threat. Update your antivirus and make a full virus scan. In your case, after removing the viruses, I'd format my hard disk and install a fresh copy of Windows XP.
You have to be more careful when you download and install programs from the net, don't install everything and never open executables attachments from e-mails.
To keep it smooth, don't put a lot of programs to run at Windows startup. I personally hate Norton, it takes a lot of resources. I don't use any antivirus and haven't been infected, you just need to know what not to open. Also, keep your Windows updated, activate autoupdates or visit Windows Update regularly.
Some programs I'd suggest:
Spybot - Search & destroy
SpywareBlaster

I ran ad-aware 6 (pro) and Spybot after posting that, adaware found 49 new items... that's by far my record.... I also ran norton and that found 11 viruses but only deleted 2 im trying ot see if i can update it somehow....

btw, i am SUPER VERY careful at what i install, so i have NO idea where all of this is comming from....

Sorry for the double post but i don't think an edit makes this thread have "new posts" and i just wanted some feedback. I just ran all these scans in safe mode and Norton was successful in guetting rid of everything, I also ran adaware and spybot and got rid of ad/spyware. Now when i posted the autoruns log above i didn't make the changes you said because i did the scans and thought that some of them might not be needed, anyways here is the new log i have:

http://www.bbfree.com/VGProManiac/index.php?act=A...h&type=post&id=164

Now the computer SEEMS to be running smoothly and normally, but i'm sure that in a couple of minutes it will get wacky again and piss me off. Now my burner isn't working so i can't backup my files on CD, i thought of taking my HD over to a friend's house and temporarly storing my files there (did something similar when i got my new pc) but he isn't here right now, so i got this new idea. I only have one partition in my whole HD.... would it be possible to somehow create an F drive... put all my files in there, format the C drive ONLY, reinstall windows XP, copy the files from F to C, then delete F (i guess i could keep F if i have to, this way i could do this again some other time if needed)

Everything seems to be OK in your log now.

quote:

---

Originally posted by Ningc_Maniac
Now the computer SEEMS to be running smoothly and normally, but i'm sure that in a couple of minutes it will get wacky again and piss me off.

---

Great Tell us if something doesn't work.

quote:

---

Originally posted by Ningc_Maniac
Now my burner isn't working so i can't backup my files on CD

---

What burning program are you using? Any error messages?

quote:

---

Originally posted by Ningc_Maniac
I only have one partition in my whole HD.... would it be possible to somehow create an F drive... put all my files in there, format the C drive ONLY, reinstall windows XP, copy the files from F to C, then delete F (i guess i could keep F if i have to, this way i could do this again some other time if needed)

---

It would be possible with Partition Magic, but I do not recommend it at all. If something goes wrong, you could loose all your data.
Wait until your friend comes back or give us more information about the CD recorder problem.

quote:

---

Everything seems to be OK in your log now.

---

Weehee

quote:

---

Great Tell us if something doesn't work.

---

Well, i've done soem pretty massive cleaning... so i really hope everything stays fine.

quote:

---

What burning program are you using? Any error messages?

---

It's not software-related, my burner doesn't seem to recognise it has a cd in it, i've had this problem before, i don't think i can fix it myself.

quote:

---

It would be possible with Partition Magic, but I do not recommend it at all. If something goes wrong, you could loose all your data.

---

Yeah i guess i won't use that..... freaky

Would a XP repair work? someone in this thread said they had a problem with it once? Would it be useful if i ran it just to fix around problems without uninstalling?

I was asking about what burning program you use because some of them cause trouble (there was a key in the registry, but I don't remember it... ). I'd try removing the drive from System properties > Hardware > Device manager and rebooting.