i did not use condom, now have about blank

Discussion in 'adware, spyware & hijack cleaning' started by gary42095, May 22, 2004.

Thread Status:
Not open for further replies.
  1. gary42095

    gary42095 Registered Member

    Joined:
    May 22, 2004
    Posts:
    1
    have about blank

    yup, i have the about blank crap on my computer and have read and read but just dont have the brain pan to understand this (ya big dummy)...

    i have dl'ed hjt ,cwsshred,dll fix, and spybots&d, i am completely lost and retarded. if someone has the patience to help please chime in. :oops:

    i have the about blank homepage i cannot change and also the popup page that comes with it
    i used spybot s&d1.3



    Logfile of HijackThis v1.97.7
    Scan saved at 7:41:13 PM, on 5/22/2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\D-Tools\daemon.exe
    C:\Program Files\Microsoft Hardware\Mouse\point32.exe
    C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\devldr32.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\me\Desktop\HijackThis.exe
    C:\Program Files\Messenger\msmsgs.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\nobp.dll/sp.html (obfuscated)
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Comcast High-Speed Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.ne2.attbb.net:8000
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.ne2.attbb.net

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {A7E3D665-C039-41E5-9E31-99FFBE47359D} - C:\WINDOWS\System32\nobp.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [POINTER] point32.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - Startup: PowerReg Scheduler.exe
    O4 - Startup: Data LifeGuard LifeLine Lite installer.lnk = C:\Documents and Settings\me\Local Settings\Temp\ins1.tmp\dlgli.exe
    O4 - Global Startup: CorelCENTRAL 10.lnk = ?
    O4 - Global Startup: QuickBooks 2002 Delivery Agent.lnk = C:\Program Files\Intuit\QuickBooks Pro\Components\QBAgent\qbdagent2002.exe
    O9 - Extra button: AIM (HKLM)
    O9 - Extra button: Related (HKLM)
    O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/mickey/us/win/QuickTimeInstaller.exe
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37618.5721875
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab




    also here is a log of dllfix log but i dunno if it will help


    05/22/2004 06:06 PM 57,344 winid.dll
    05/22/2004 06:05 PM 31,232 nobp.dll
    03/29/2004 09:25 PM 550,400 rtcdll.dll
    03/29/2004 09:25 PM 136,704 schannel.dll
    03/29/2004 09:25 PM 969,216 msgina.dll
    03/29/2004 09:25 PM 51,712 msasn1.dll
    03/29/2004 09:25 PM 454,656 ipnathlp.dll
    03/29/2004 09:25 PM 36,864 mf3216.dll
    03/29/2004 09:25 PM 593,408 h323msp.dll
    03/29/2004 09:25 PM 48,640 browser.dll
    03/29/2004 09:25 PM 241,664 gdi32.dll
    03/29/2004 09:25 PM 301,568 netapi32.dll
    03/29/2004 05:25 PM 648,192 lsasrv.dll
    03/16/2004 02:44 PM 30,749 vbajet32.dll
    03/16/2004 02:44 PM 1,507,356 msjet40.dll
    03/16/2004 10:44 AM 380,957 expsrv.dll
    03/05/2004 10:05 PM 97,280 txflog.dll
    03/05/2004 10:05 PM 214,528 rpcss.dll
    03/05/2004 10:05 PM 442,880 rpcrt4.dll
    03/05/2004 10:05 PM 1,105,408 ole32.dll
    03/05/2004 10:05 PM 64,512 mtxclu.dll
    03/05/2004 10:05 PM 82,432 mtxoci.dll
    03/05/2004 10:05 PM 977,920 msdtctm.dll
    03/05/2004 10:05 PM 150,528 msdtcuiu.dll
    03/05/2004 10:05 PM 365,568 msdtcprx.dll
    03/05/2004 10:05 PM 499,200 comuid.dll
    03/05/2004 10:05 PM 226,816 es.dll
    03/05/2004 10:05 PM 1,177,088 comsvcs.dll
    03/05/2004 10:05 PM 64,512 colbact.dll
    03/05/2004 10:04 PM 110,080 clbcatex.dll
    03/05/2004 10:04 PM 596,480 catsrvut.dll
    03/05/2004 10:04 PM 225,280 catsrv.dll
    03/05/2004 06:05 PM 499,712 clbcatq.dll
    03/03/2004 01:53 PM 595,968 INETCOMM.DLL
    03/01/2004 02:55 PM 348,189 msxbde40.dll
    03/01/2004 02:55 PM 831,519 mswdat10.dll
    03/01/2004 02:55 PM 614,431 mswstr10.dll
    03/01/2004 02:55 PM 258,077 mstext40.dll
    03/01/2004 02:55 PM 552,989 msrepl40.dll
    03/01/2004 02:55 PM 315,423 msrd3x40.dll
    03/01/2004 02:55 PM 421,919 msrd2x40.dll
    03/01/2004 02:55 PM 348,189 mspbde40.dll
    03/01/2004 02:55 PM 213,023 msltus40.dll
    03/01/2004 02:55 PM 241,693 msjtes40.dll
    03/01/2004 02:55 PM 151,583 msjint40.dll
    03/01/2004 02:55 PM 53,279 msjter40.dll
    03/01/2004 02:55 PM 319,517 msexcl40.dll
    03/01/2004 02:55 PM 512,029 msexch40.dll
    03/01/2004 02:52 PM 358,976 msjetoledb40.dll
    02/25/2004 01:08 PM 680,960 DivX.dll
    02/09/2004 09:10 PM 200,984 wuaueng.dll
    02/09/2004 09:09 PM 183,064 iuengine.dll
    02/09/2004 09:08 PM 115,480 iuctl.dll
    01/16/2004 03:29 AM 1,024,512 BROWSEUI.DLL
    01/08/2004 02:23 PM 585,216 WININET.DLL
    01/08/2004 02:23 PM 1,337,344 SHDOCVW.DLL
    01/08/2004 02:21 PM 2,764,288 MSHTML.DLL
     
    Last edited by a moderator: May 23, 2004
  2. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,429
    Location:
    Netherlands
    Hi gary42095,

    The easiest way to solve this is to update Windows and IE and then scan your computer with AdAware.

    If that does not work remove this file: C:\WINDOWS\System32\winid.dll either from bootdisks or from the Recovery Console.
    Then again use AdAware as described here: https://www.wilderssecurity.com/showthread.php?t=15913

    Regards,

    Pieter
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.