Go Back   Cyber Tech Help Support Forums > Software > Malware Removal

Notices

Malware Removal Discussion about Trojans, viruses, hoaxes, firewalls, spyware, and general Security issues. If you suspect your PC is infected with a virus, trojan or spyware app please include any supporting documentation or logs

Reply
 
Topic Tools
  #1  
Old December 1st, 2006, 02:07 PM
Ian S Ian S is offline
New Member
 
Join Date: Dec 2006
Posts: 2
really annoying toolbar: Moved from XP by Murray

Hi,

I've got a toolbar I cant get rid of.

Ran smitfraudfix: result below. I'm not very techie literate :-(

SmitFraudFix v2.126

Scan done at 12:59:41.12, Fri 12/01/2006
Run from C:\Documents and Settings\geant\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in normal mode

C:\


C:\WINDOWS


C:\WINDOWS\system


C:\WINDOWS\Web


C:\WINDOWS\system32

C:\WINDOWS\system32\xxfgmy.dll FOUND !

C:\Documents and Settings\geant


C:\Documents and Settings\geant\Application Data


Start Menu

C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url FOUND !
C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url FOUND !

C:\DOCUME~1\geant\FAVORI~1


Desktop


C:\Program Files

C:\Program Files\Video ActiveX Object\ FOUND !

Corrupted keys


Desktop Components

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="My Current Home Page"


Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\SharedTaskScheduler]
"{588599f4-de26-4c28-ba14-f4eb17e33481}"="emptins"



AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""


Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""
"DllName"="C:\\WINDOWS\\system32\\NavLogon.dll "


pe386-msguard-lzx32


Scanning wininet.dll infection


End

What to do?
Reply With Quote
  #2  
Old December 1st, 2006, 02:20 PM
Ian S Ian S is offline
New Member
 
Join Date: Dec 2006
Posts: 2
I ran it as "clean" in safe mode and it looks initially at least, as if t may have fixed it. Fingers crossed.

Log below. Any comments from those who understand this better than I do?

Thanks Ian

SmitFraudFix v2.126

Scan done at 13:11:57.79, Fri 12/01/2006
Run from C:\Documents and Settings\geant\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix run in safe mode

Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\SharedTaskScheduler]
"{588599f4-de26-4c28-ba14-f4eb17e33481}"="emptins"


Killing process


Generic Renos Fix

GenericRenosFix by S!Ri


Deleting infected files

C:\WINDOWS\system32\xxfgmy.dll Deleted
C:\DOCUME~1\ALLUSE~1\STARTM~1\Online Security Guide.url Deleted
C:\DOCUME~1\ALLUSE~1\STARTM~1\Security Troubleshooting.url Deleted
C:\Program Files\Video ActiveX Object\ Deleted

Deleting Temp Files


Registry Cleaning

Registry Cleaning done.

After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


End
Reply With Quote
Reply

Bookmarks

Topic Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Topics
Topic Topic Starter Forum Replies Last Post
Window XP MEC Security Toolbar 7.1: Moved from XP by Murray dbslc66 Malware Removal 31 October 20th, 2007 03:27 PM
Unwanted toolbar: Moved from XP by Murray micmont Malware Removal 1 July 3rd, 2007 09:22 PM
Annoying Popups and Infostealer,Winnfix etc: Moved from XP by Murray beaverman Malware Removal 24 April 30th, 2007 02:25 AM
VERY annoying popup, please help!: Moved from XP by Murray overkill Malware Removal 4 September 19th, 2006 11:57 PM
Have another annoying toolbar kbish Malware Removal 3 May 30th, 2004 11:36 AM


All times are GMT +1. The time now is 05:44 AM.