All sorts of problems with adware etc.

Dear sir/miss

Please help me!

I'm from the Netherlands and I've got a lot of problems recently concerning spyware, adware etc.

I use Norton Anivirus, which is always up to date, but recently (26 june) some downloader.Trojan or something ike that struck my pc. And a toolbar was added en many more. I didn't do a thing!

Now i have downloaded CW Shredder, AD-Aware and Spybot, and used them, the toolbar has gone, but norton still finds adware en i'm sometimes bothered with pop-ups. But I can't delete them!
Yesterday I have deleted some file from (Task manager: Inscardw.exe) of a company named Thunderdome (size 64 kb) and 2 files named RICO.exe. I read somewhere that this caused a lot of trouble.

Also Windows task manager uses a file named Ituhkfxn, but I really don't know what this is.

And Norton anti-virus finds Adware.Raxmus and some more

I'm totally not experienced further, but hope some of you can help me!!
I'm quite desperate, because I don't want to format my pc

The report below is from ad-Aware, maybe you can do something with it:

Lavasoft Ad-aware Personal Build 6.181
Logfile created on :maandag 28 juni 2004 1:33:11
Created with Ad-aware Personal, free for private use.
Using reference-file :01R325 27.06.2004
______________________________________________________

Ad-aware Settings
=========================
Set : Activate in-depth scan (Recommended)
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep scan registry


28-6-2004 1:33:11 - Scan started. (Smart mode)

Listing running processes
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 27-6-2004 23:03:31
BasePriority : Normal


#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ThreadCreationTime : 27-6-2004 23:03:38
BasePriority : High


#:3 [services.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 27-6-2004 23:03:39
BasePriority : Normal
FileSize : 99 KB
FileVersion : 5.1.2600.0 (xpclient.010817-114
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Anwendung f
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Betriebssystem Microsoft
Created on : 16-9-2001 16:17:18
Last accessed : 27-6-2004 23:03:39
Last modified : 18-8-2001 12:00:00

#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 27-6-2004 23:03:39
BasePriority : Normal
FileSize : 11 KB
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft
Created on : 16-9-2001 16:16:50
Last accessed : 27-6-2004 23:04:11
Last modified : 29-8-2002 10:43:40

#:5 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 27-6-2004 23:03:41
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-114
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 16-9-2001 16:17:22
Last accessed : 27-6-2004 23:04:31
Last modified : 18-8-2001 12:00:00

#:6 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 27-6-2004 23:03:41
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-114
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 16-9-2001 16:17:22
Last accessed : 27-6-2004 23:04:31
Last modified : 18-8-2001 12:00:00

#:7 [ccsetmgr.exe]
FilePath : C:\Programme\Gemeinsame Dateien\Symantec Shared\
ThreadCreationTime : 27-6-2004 23:03:45
BasePriority : Normal
FileSize : 229 KB
FileVersion : 2.0.0.635
ProductVersion : 2.0.0.635
Copyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Common Client Settings Manager Service
InternalName : ccSetMgr
OriginalFilename : ccSetMgr.exe
ProductName : Common Client
Created on : 22-8-2003 7:15:24
Last accessed : 27-6-2004 22:41:16
Last modified : 22-8-2003 7:15:24

#:8 [explorer.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 27-6-2004 23:03:45
BasePriority : Normal
FileSize : 976 KB
FileVersion : 6.00.2800.1221 (xpsp2.030511-1403)
ProductVersion : 6.00.2800.1221
CompanyName : Microsoft Corporation
FileDescription : Windows Explorer
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Betriebssystem Microsoft
Created on : 29-5-2003 9:48:20
Last accessed : 27-6-2004 23:07:22
Last modified : 29-5-2003 9:48:20

#:9 [ccevtmgr.exe]
FilePath : C:\Programme\Gemeinsame Dateien\Symantec Shared\
ThreadCreationTime : 27-6-2004 23:03:45
BasePriority : Normal
FileSize : 249 KB
FileVersion : 2.0.0.635
ProductVersion : 2.0.0.635
Copyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Common Client Event Manager Service
InternalName : ccEvtMgr
OriginalFilename : ccEvtMgr.exe
ProductName : Common Client
Created on : 22-8-2003 7:14:32
Last accessed : 27-6-2004 22:34:22
Last modified : 22-8-2003 7:14:32

#:10 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 27-6-2004 23:03:46
BasePriority : Normal
FileSize : 50 KB
FileVersion : 5.1.2600.0 (XPClient.010817-114
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
OriginalFilename : spoolsv.exe
ProductName : Microsoft
Created on : 16-9-2001 16:17:21
Last accessed : 27-6-2004 23:03:46
Last modified : 18-8-2001 12:00:00

#:11 [kbd.exe]
FilePath : C:\HP\KBD\
ThreadCreationTime : 27-6-2004 23:03:51
BasePriority : High
FileSize : 60 KB
FileVersion : 1.0.2.0
ProductVersion : 1.0.2.0
Copyright : Copyright
CompanyName : Hewlett-Packard Company
FileDescription : KBD EXE
InternalName : KBD EXE
OriginalFilename : Kbd.exe
ProductName : Hewlett-Packard Company KBD EXE
Created on : 17-9-2001 8:27:04
Last accessed : 27-6-2004 23:03:30
Last modified : 6-7-2001 12:56:56

#:12 [em_exec.exe]
FilePath : C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\
ThreadCreationTime : 27-6-2004 23:03:52
BasePriority : Normal
FileSize : 28 KB
FileVersion : 9.70.216
ProductVersion : 9.70
Copyright : Copyright
CompanyName : Logitech Inc.
FileDescription : Control Center
InternalName : EM_EXEC
OriginalFilename : EM_EXEC.CPP
ProductName : MouseWare
Created on : 19-4-2003 15:13:38
Last accessed : 27-6-2004 23:03:30
Last modified : 1-7-2002 7:50:00

#:13 [msgplus.exe]
FilePath : C:\Programme\Messenger Plus! 2\
ThreadCreationTime : 27-6-2004 23:03:52
BasePriority : Normal
FileSize : 136 KB
FileVersion : 2, 54, 0, 74
ProductVersion : 2, 54, 0, 74
Copyright : Copyright (C) 2001-2003
CompanyName : Patchou
FileDescription : Messenger Plus!
InternalName : MsgPlus
OriginalFilename : MsgPlus.exe
ProductName : Messenger Plus! 2
Created on : 30-4-2003 18:55:35
Last accessed : 27-6-2004 23:03:52
Last modified : 17-4-2004 10:49:27

#:14 [lvcoms.exe]
FilePath : C:\Programme\Gemeinsame Dateien\Logitech\QCDriver3\
ThreadCreationTime : 27-6-2004 23:03:52
BasePriority : Normal
FileSize : 124 KB
FileVersion : 7.3.0.1113
ProductVersion : 7.3.0.1113
Copyright : (c) 1996-2002 Logitech. All rights reserved.
CompanyName : Logitech Inc.
FileDescription : LVCom Server
InternalName : LVComS.exe
OriginalFilename : LVComS.exe
ProductName : Logitech ImageStudio
Created on : 6-5-2003 19:58:04
Last accessed : 27-6-2004 23:03:30
Last modified : 10-12-2002 15:54:04

#:15 [logitray.exe]
FilePath : C:\Programme\Logitech\ImageStudio\
ThreadCreationTime : 27-6-2004 23:03:53
BasePriority : Normal
FileSize : 60 KB
FileVersion : 7.3.0.1113
ProductVersion : 7.3.0.1113
Copyright : (c) 1996-2002 Logitech. All rights reserved.
CompanyName : Logitech Inc.
FileDescription : ImageStudio Tray Application
InternalName : LogiTray.exe
OriginalFilename : LogiTray.exe
ProductName : Logitech ImageStudio
Created on : 10-12-2002 16:31:34
Last accessed : 27-6-2004 23:03:30
Last modified : 10-12-2002 16:31:34

#:16 [qttask.exe]
FilePath : C:\Programme\QuickTime\
ThreadCreationTime : 27-6-2004 23:03:53
BasePriority : Normal
FileSize : 96 KB
FileVersion : 6.5
ProductVersion : QuickTime 6.5
CompanyName : Apple Computer, Inc.
InternalName : QuickTime Task
OriginalFilename : QTTask.exe
ProductName : QuickTime
Created on : 3-5-2003 14:27:19
Last accessed : 27-6-2004 23:03:30
Last modified : 18-3-2004 14:09:15

#:17 [ccapp.exe]
FilePath : C:\Programme\Gemeinsame Dateien\Symantec Shared\
ThreadCreationTime : 27-6-2004 23:03:53
BasePriority : Normal
FileSize : 69 KB
FileVersion : 2.0.0.635
ProductVersion : 2.0.0.635
Copyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Symantec Common Client User Session
InternalName : ccApp
OriginalFilename : ccApp.exe
ProductName : Common Client
Created on : 22-8-2003 7:12:34
Last accessed : 27-6-2004 23:03:54
Last modified : 22-8-2003 7:12:34

#:18 [ccapp.exe]
FilePath : C:\Programme\Gemeinsame Dateien\Symantec Shared\
ThreadCreationTime : 27-6-2004 23:03:54
BasePriority : Normal
FileSize : 69 KB
FileVersion : 2.0.0.635
ProductVersion : 2.0.0.635
Copyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Symantec Common Client User Session
InternalName : ccApp
OriginalFilename : ccApp.exe
ProductName : Common Client
Created on : 22-8-2003 7:12:34
Last accessed : 27-6-2004 23:03:54
Last modified : 22-8-2003 7:12:34

#:19 [ituhkfxn.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 27-6-2004 23:03:55
BasePriority : Normal
FileSize : 37 KB
Created on : 25-6-2004 22:25:19
Last accessed : 27-6-2004 23:03:30
Last modified : 21-5-2004 16:02:58

#:20 [cvpnd.exe]
FilePath : C:\Program Files\UM-ICTS\VPN Tunnel\
ThreadCreationTime : 27-6-2004 23:03:56
BasePriority : Normal
FileSize : 1383 KB
FileVersion : 4.0.3 (C)
ProductVersion : 4.0.3 (C)
Copyright : Copyright
CompanyName : Cisco Systems, Inc.
FileDescription : Cisco Systems VPN Client
InternalName : cvpnd
OriginalFilename : CVPND.EXE
ProductName : Cisco Systems VPN Client
Created on : 15-2-2004 13:15:05
Last accessed : 27-6-2004 22:41:16
Last modified : 2-12-2003 9:27:08

#:21 [ghosts~2.exe]
FilePath : C:\PROGRA~1\NORTON~1\NORTON~4\
ThreadCreationTime : 27-6-2004 23:03:56
BasePriority : Normal
FileSize : 196 KB
FileVersion : 2003.789
ProductVersion : 2003.789
Copyright : Copyright (C) 1998-2003 Symantec Corp. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Norton Ghost Start
InternalName : GhostStartService
OriginalFilename : GhostStartService.exe
ProductName : Norton Ghost Start Service

#:22 [navapsvc.exe]
FilePath : C:\Programme\Norton SystemWorks\Norton Antivirus\
ThreadCreationTime : 27-6-2004 23:03:57
BasePriority : Normal
FileSize : 155 KB
FileVersion : 10.00.2
ProductVersion : 10.00.2
Copyright : Norton AntiVirus 2004 for Windows 98/ME/2000/XP Copyright (c) 2003 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Norton AntiVirus Auto-Protect Service
InternalName : NAVAPSVC
OriginalFilename : NAVAPSVC.EXE
ProductName : Norton AntiVirus
Created on : 26-5-2004 11:30:15
Last accessed : 27-6-2004 22:39:51
Last modified : 12-5-2004 8:59:54

#:23 [nprotect.exe]
FilePath : C:\PROGRA~1\NORTON~1\NORTON~3\
ThreadCreationTime : 27-6-2004 23:04:00
BasePriority : Normal
FileSize : 84 KB
FileVersion : 17.0.0.82
ProductVersion : 17.0.0.82
Copyright : Copyright (c) 1997-2003 Symantec Corporation
CompanyName : Symantec Corporation
FileDescription : Norton Protection Status
InternalName : NPROTECT
OriginalFilename : NPROTECT.EXE
ProductName : Norton Utilities
Created on : 15-9-2003 16:18:36
Last accessed : 27-6-2004 22:41:16
Last modified : 15-9-2003 16:18:36

#:24 [nvsvc32.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 27-6-2004 23:04:02
BasePriority : Normal
FileSize : 68 KB
FileVersion : 6.14.10.4403
ProductVersion : 6.14.10.4403
Copyright : (C) NVIDIA Corporation. All rights reserved.
CompanyName : NVIDIA Corporation
FileDescription : NVIDIA Driver Helper Service, Version 44.03
InternalName : NVSVC
OriginalFilename : nvsvc32.exe
ProductName : NVIDIA Driver Helper Service, Version 44.03
Created on : 2-5-2003 13:19:00
Last accessed : 27-6-2004 23:04:02
Last modified : 2-5-2003 13:19:00

#:25 [savscan.exe]
FilePath : C:\Programme\Norton SystemWorks\Norton Antivirus\
ThreadCreationTime : 27-6-2004 23:04:04
BasePriority : Normal
FileSize : 189 KB
FileVersion : 9.2.1.14
ProductVersion : 9.2
Copyright : Copyright (c) 2003 Symantec Corporation
CompanyName : Symantec Corporation
FileDescription : Symantec AntiVirus Scanner
InternalName : SAVSCAN
OriginalFilename : SAVSCAN.EXE
ProductName : Symantec AntiVirus AutoProtect
Created on : 30-4-2004 19:22:28
Last accessed : 27-6-2004 22:41:16
Last modified : 7-11-2003 17:46:58

#:26 [nopdb.exe]
FilePath : C:\PROGRA~1\NORTON~1\NORTON~3\SPEEDD~1\
ThreadCreationTime : 27-6-2004 23:04:14
BasePriority : Normal
FileSize : 172 KB
FileVersion : 7.00.0.24
ProductVersion : 7.00.0.24
Copyright : Copyright (c) 1997-2003 Symantec Corporation
CompanyName : Symantec Corporation
FileDescription : NOPDB
InternalName : NOPDB
OriginalFilename : NOPDB.dll
ProductName : Norton Speed Disk
Created on : 15-9-2003 16:18:34
Last accessed : 27-6-2004 22:41:16
Last modified : 15-9-2003 16:18:34

#:27 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 27-6-2004 23:04:16
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-114
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 16-9-2001 16:17:22
Last accessed : 27-6-2004 23:04:31
Last modified : 18-8-2001 12:00:00

#:28 [ad-aware.exe]
FilePath : C:\PROGRA~1\Lavasoft\AD-AWA~1\
ThreadCreationTime : 27-6-2004 23:04:22
BasePriority : Normal
FileSize : 668 KB
FileVersion : 6.0.1.181
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 27-6-2004 18:41:14
Last accessed : 27-6-2004 22:53:52
Last modified : 12-7-2003 19:00:20

#:29 [iexplore.exe]
FilePath : C:\Programme\Internet Explorer\
ThreadCreationTime : 27-6-2004 23:14:42
BasePriority : Normal
FileSize : 89 KB
FileVersion : 6.00.2800.1106 (xpsp1.020828-1920)
ProductVersion : 6.00.2800.1106
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
OriginalFilename : IEXPLORE.EXE
ProductName : Betriebssystem Microsoft
Created on : 3-5-2003 19:55:33
Last accessed : 27-6-2004 23:14:46
Last modified : 29-8-2002 10:43:38

#:30 [taskmgr.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 27-6-2004 23:16:22
BasePriority : High
FileSize : 130 KB
FileVersion : 5.1.2600.1106 (xpsp1.020828-1920)
ProductVersion : 5.1.2600.1106
CompanyName : Microsoft Corporation
FileDescription : Windows Task-Manager
InternalName : taskmgr
OriginalFilename : taskmgr.exe
ProductName : Betriebssystem Microsoft
Created on : 3-5-2003 20:05:40
Last accessed : 27-6-2004 23:16:25
Last modified : 29-8-2002 10:43:40

#:31 [msmsgs.exe]
FilePath : C:\Programme\Messenger\
ThreadCreationTime : 27-6-2004 23:32:48
BasePriority : Normal
FileSize : 1456 KB
FileVersion : 4.7.2009
ProductVersion : Version 4.7
Copyright : Copyright (c) Microsoft Corporation 1997-2003
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msmsgs
OriginalFilename : msmsgs.exe
ProductName : Messenger
Created on : 16-9-2001 16:30:47
Last accessed : 27-6-2004 23:15:53
Last modified : 14-4-2003 17:30:14

Memory scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


Started registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


Started deep registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Deep registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Tracking Cookie Object recognized!
Type : File
Data : hans meiser@cgi-bin[2].txt
Object : C:\Dokumente und Einstellungen\Hans Meiser\Cookies\

Created on : 27-6-2004 23:22:14
Last accessed : 27-6-2004 23:22:19
Last modified : 27-6-2004 23:22:19


¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯


Deep scanning and examining files (C
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯


Performing conditional scans..
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Conditional scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 1


1:37:26 Scan complete

Summary of this scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Total scanning time :00:04:13:469
Objects scanned :44881
Objects identified :1
Objects ignored :0
New objects :1

Thanx a lot for any help!!!!!

 

Hi theonlymarco

Please go to

http://209.133.47.12/~merijn/files/HijackThis.exe or
http://www.mjc1.com/mirror/hjt/

and download 'Hijack This!'.
Unzip, doubleclick HijackThis.exe, and hit "Scan".

When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log as a .txt file, and copy and paste its contents into your next post.

Most of what it lists will be harmless, so do not fix anything yet.

You also could go here and get one of the free trials of an Anti Trojan and scan for Trojans.
http://www.wilders.org/anti_trojans.htm

Go for free online Virus scans here:

http://housecall.trendmicro.com/housecall/start_corp.asp
http://www.pandasoftware.com/activescan/

Allow them to clean

Empty your Temporary Internet Files and history in Internet Options. And clean out your
%Userprofile%\Local Settings\Temp
folder. It's a good idea to do that regularly.

Then Disable system restore: Instructions here
Reboot

Enable System Restore.

PLs. run HJT and post your log. Thanks.