Spyaxe?? Smitfraud C? Can you please help??

Hello,

I also tried out everything of Thread 75890, always with my brother on phone, cause i´m not so good in comupters (as well as in english ). So after using smitrem, adaware, ewido and panda I´m still getting the pop up that my computer is infected (did I say I hate spy axe?)

Sorry I don´t know if it´s correct, but I just post all the files I created right here now.

HJT log removed



Pandas text

Incident Status Location

Adware:Adware/SpyAxe Not desinfected C:\WINDOWS\system32\ioctrl.dll
smitRem © log file
version 2.8

by noahdfear


Microsoft Windows XP [Version 5.1.2600]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

checking for ShudderLTD key

ShudderLTD key not present!

checking for PSGuard.com key


PSGuard.com key not present!




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

SpyAxeFix © by noahdfear

spyaxe directory present

spyaxe uninstaller present

Starting spyaxe uninstaller

REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"
"{C1A8B6A1-2C81-1C3D-A3C6-A1CCDB10B47F}"="Windows Update"

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Existing Pre-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~

Security Troubleshooting.url


~~~ Favorites ~~~

Antivirus Test Online.url
shopping


~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~


~~~ Miscellaneous Files/folders ~~~




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
Killing PID 768 'explorer.exe'
Killing PID 768 'explorer.exe'

Starting registry repairs

Deleting files


Remaining Post-run Files


~~~ Program Files ~~~



~~~ Shortcuts ~~~



~~~ Favorites ~~~



~~~ system32 folder ~~~



~~~ Icons in System32 ~~~



~~~ Windows directory ~~~



~~~ Drive root ~~~



~~~ Miscellaneous Files/folders ~~~




~~~ Wininet.dll ~~~

CLEAN!


ewido security suite - Scan Report
---------------------------------------------------------

+ Erstellt am: 19:05:37, 12.12.2005
+ Report-Checksumme: 8EF446E0

+ Scanergebnis:

C:\Dokumente und Einstellungen\Kunde\Cookies\kunde@com[2].txt -> Spyware.Cookie.Com : Gesäubert mit Backup
C:\Dokumente und Einstellungen\Kunde\Cookies\kunde@ivwbox[1].txt -> Spyware.Cookie.Ivwbox : Gesäubert mit Backup
C:\Programme\SlySoft\AnyDVD\RegCheck.exe -> Trojan.Pakes : Gesäubert mit Backup


::Report Ende



I have no idea what to do now, can you please help?

 

Hi escarto, welcome to Wilders.

Unfortunately Wilders no longer analyzes HijackThis logs anymore,

https://www.wilderssecurity.com/showthread.php?t=42148

U could post your log over at this site,

http://gladiator-antivirus.com/forum/index.php?showtopic=10517

and i'm sure the malware experts there would be happy to analyse your log and give u recommendations on any malware found.

Your HJT log here will be removed shortly.


snowbound

 

Thank you very much anyway I will it try there!!!

 

You're welcome and good luck!



snowbound