Hijackthis

**krome** · 04-23-2004, 09:14 PM

find anything worth lookin into, im sorta having problems getting rid of one that links me to *removed the link <~ dont go here, I done spybot,adware and norton to remove the many files it found , and still pops up the website and hijack it

Logfile of HijackThis v1.97.7
Scan saved at 4:16:43 PM, on 4/23/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\CTsvcCDA.exe
C:\WINDOWS\System32\GEARSEC.EXE
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\services\wmplayer.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Mediafour\MACVNTFY.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Documents and Settings\Owner\Application Data\ttuh.exe
C:\Program Files\Kazaa Lite Resurrection\kazaalite.kpp
C:\Program Files\ShareMonkey\Speedup.exe
C:\Program Files\Winamp\Winamp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Owner\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = https://filesharingtalk.com/index.php
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
F1 - win.ini: run=C:\WINDOWS\System32\services\wmplayer.exe
O2 - BHO: (no name) - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - (no file)
O2 - BHO: (no name) - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Mediafour XPlay Tray Notification Icon] C:\Program Files\Mediafour\XPlay\XPTRYICN.EXE
O4 - HKLM\..\Run: [Mediafour Mac Volume Notifications] "C:\Program Files\Common Files\Mediafour\MACVNTFY.EXE" /auto
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [xpsystem] C:\WINDOWS\System32\services\wmplayer.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [Red Swoosh EDN Client] C:\Program Files\RSNet\RSEDNClient.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [xpsystem] C:\WINDOWS\System32\services\wmplayer.exe
O4 - HKCU\..\Run: [Aida] C:\Documents and Settings\Owner\Application Data\ttuh.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: AIM (HKLM)
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {323B7117-E3F8-4B60-B369-B9790D8C847C} (DownloadManagerInstall Control) - http://download.acegain.com/agent/DMInstall.cab
O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003120...all/xscan53.cab
O16 - DPF: {9EB320CE-BE1D-4304-A081-4B4665414BEF} (MediaTicketsInstaller Control) - http://www.mt-download.com/MediaTicketsInstaller.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/...38002.635787037
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwa...ash/swflash.cab
O16 - DPF: {FF0C042C-98E9-4C36-B2EC-E21FDFDCEF75} (InstallCtl Class) - http://download.redswoosh.net/Instal...sinstaller.cab

**foot loose** · 04-23-2004, 09:31 PM

it might be installed here
C:\WINDOWS\Downloaded Program Files

**Mullyman** · 04-23-2004, 09:46 PM

First of all...do a online scan:

http://housecall.trendmicro.com/

Then from this site..download CWshredder and run it....when it is done...hit the fix button B)

http://www.zerosrealm.com/downloads.php

**baccyman** · 04-23-2004, 10:00 PM

i don't know if this will help you it is a site that deals with this sort of thing
http://www.spywareinfo.com/~merijn/index.html

**J'Pol** · 04-23-2004, 10:04 PM

If the link at the start of this thread is very dangerous could the author or a MOD change it to h**p. Just in case someone clicks it in error.

Better safe than sorry.

Cheers

**silent VI** · 04-23-2004, 10:09 PM

Originally posted by J'Pol@23 April 2004 - 22:04
If the link at the start of this thread is very dangerous could the author or a MOD change it to h**p. Just in case someone clicks it in error.

Better safe than sorry.

Cheers

now i wanna click it

**J'Pol** · 04-23-2004, 10:24 PM

Originally posted by silent VI+23 April 2004 - 23:09--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (silent VI @ 23 April 2004 - 23:09)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin-J'Pol@23 April 2004 - 22:04
If the link at the start of this thread is very dangerous could the author or a MOD change it to h**p. Just in case someone clicks it in error.

Better safe than sorry.

Cheers

now i wanna click it [/b][/quote]

Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It
Click It

**pol** · 04-23-2004, 10:37 PM

i clicked it and all is well, removed the link anyway just in case

**krome** · 04-23-2004, 10:48 PM

sorry anyways for posting the url like that...

But n-e ways im still infected with the spyware , i done it all and still keeps hijacking my IE... :helpsmile:

also read here

osts file not present
CWS.Yexe Registry value: HKCU\..\Run [xpsystem] C:\WINDOWS\System32\services\wmplayer.exe
CWS.Yexe Registry value: HKLM\..\Run [xpsystem] C:\WINDOWS\System32\services\wmplayer.exe
Shell Registry value: HKLM\..\WinLogon [Shell] Explorer.exe
UserInit Registry value: HKLM\..\WinLogon [UserInit] C:\WINDOWS\system32\userinit.exe,
Registry value: DefaultPrefix (should be http://) [] http://
Registry value: WWW Prefix (should be http://) [www] http://
Registry value: Mosaic Prefix (should be http://) [mosaic] http://
Registry value: Home Prefix (should be http://) [home] http://
Found Win.ini file: C:\WINDOWS\win.ini (634 bytes, A)
Found System.ini file: C:\WINDOWS\system.ini (286 bytes, A)
CWS.Yexe Registry key: HKLM\..\BHOs\{5321E378-FFAD-4999-8C62-03CA8155F0B3}

look at the Registry value that (should be http:/ /) part ?

**baccyman** · 04-23-2004, 10:54 PM

if you d/l the cw shreader tool at the address in my other post that should get rid of it for you

Thread: Hijackthis

Thread Tools

Bookmarks

Bookmarks

Posting Permissions