Danger : Spyware...Pls help me with this Hijackthis log.

Status
Not open for further replies.
I have got a RED desktop with a Block box at the center ....written in RED " Danger: Spyware " & asking me to download Razespyware. I haven't downloaded. Unable to right click on the desktop. My wallpaper is hidden behind the Red screen. Its looking awful. Have already run Ad-AwareSE, CWShredder, Stinger, AboutBuster from Safe Mode. Did not help. Then ran the HijackThis.
Sending the logfile for Analysis.

Thanks,
Dipesh
 

Attachments

  • hijackthis.txt
    3.9 KB · Views: 5
Hello and welcome to Techspot.

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Go to add remove programmes in your control panel and uninstall anything to do with(if there).

DAP
Network Monitor

Close control panel.

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

netmon.exe

Close task manager.

Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).

O1 - Hosts: localhost 127.0.0.1

O8 - Extra context menu item: &Clean Traces - F:\Program Files\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download with &DAP - F:\Program Files\DAP\dapextie.htm

O8 - Extra context menu item: Download &all with DAP - F:\Program Files\DAP\dapextie2.htm

O16 - DPF: {42F2C9BA-614F-47C0-B3E3-ECFD34EED658} - http://static.35mb.com/applet/applet_y.cab

O16 - DPF: {CAFECAFE-0013-0001-0022-ABCDEFABCDEF} (JInitiator 1.3.1.22) -

O17 - HKLM\System\CCS\Services\Tcpip\..\{22FA1BA9-E0B8-4549-832F-31FAED5FB745}: NameServer = 85.255.116.134,85.255.112.5<Only fix this if it doesn`t belong to your ISP>

O23 - Service: Network Monitor - Unknown owner - F:\Program Files\Network Monitor\netmon.exe (file missing)

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files(if there).

F:\Program Files\Network Monitor\netmon.exe
F:\Program Files\DAP

Reboot into normal mode and turn system restore back on.

You are using a completely unpatched version of Windows. Install at least Windows SP1, or preferably Windows SP2. You can get these by running Windows updates.

Dap is an undesirable programme to have on your system. If you really want to use a download manager, get the Stardownloader from HERE.


Regards Howard :wave: :wave:
 
Status
Not open for further replies.
Back