also @ TechSpot: US BitTorrent traffic decline credited to legal alternatives

TechSpot

IST bar help please

Discussion in 'Software Apps' started by jackblackness, Apr 12, 2005.

Thread Status:
Not open for further replies.
  1. jackblackness Newcomer, in training

    ok, so i use avant browser because i like the tabbed window style and the pop-up blocker has worked for me for a while. well, i went to use windows update, which still goes through IE and i saw a new toolbar and was instantly heartbroken, after weeks of my computer working fine, now i have more spyware....first things first...here is my HJT log


    Logfile of HijackThis v1.99.1
    Scan saved at 3:54:59 PM, on 4/12/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\ISTsvc\istsvc.exe
    C:\WINDOWS\ayjgwd.exe
    C:\Program Files\Internet Optimizer\optimize.exe
    C:\PROGRA~1\COMMON~1\qooo\qooom.exe
    c:\program files\180solutions\sais.exe
    C:\PROGRA~1\COMMON~1\qooo\qoooa.exe
    C:\Program Files\Avant Browser\avant.exe
    C:\Documents and Settings\admin\My Documents\my downloads\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll
    O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Program Files\SideFind\sfbho.dll
    O3 - Toolbar: ISTbar - {5F1ABCDB-A875-46c1-8345-B72A4567E486} - C:\PROGRA~1\ISTbar\istbar.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
    O4 - HKLM\..\Run: [Cal5ASfEa] C:\WINDOWS\ayjgwd.exe
    O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
    O4 - HKLM\..\Run: [sais] c:\program files\180solutions\sais.exe
    O4 - HKLM\..\Run: [livad] C:\WINDOWS\livad.exe
    O4 - HKLM\..\Run: [Power Scan] C:\Program Files\Power Scan\powerscan.exe
    O4 - HKCU\..\Run: [qooo] C:\PROGRA~1\COMMON~1\qooo\qooom.exe
    O8 - Extra context menu item: Add to AD Black List - C:\Program Files\Avant Browser\AddToADBlackList.htm
    O8 - Extra context menu item: Block All Images from the Same Server - C:\Program Files\Avant Browser\AddAllToADBlackList.htm
    O8 - Extra context menu item: Highlight - C:\Program Files\Avant Browser\Highlight.htm
    O8 - Extra context menu item: Open All Links in This Page... - C:\Program Files\Avant Browser\OpenAllLinks.htm
    O8 - Extra context menu item: Search - C:\Program Files\Avant Browser\Search.htm
    O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Program Files\SideFind\sidefind.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1113058036782
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe


    thnx to all who read this and double thanks to all who help me out here...

    p.s. what is a good freeware program for keeping spyware at bay, i used to use spyware guard but now every time i download it im missing some necissary file and i cant find it anywhere.
  2. howard_hopkinso Newcomer, in training

    First go HERE and follow the instructions exactly. print them out if you can.

    Once you have done that, go HERE for instructions on how to post your Hijackthis log.

    Regards Howard :) :)
  3. jackblackness Newcomer, in training

    so far so good, thank you very much for the reference
  4. RealBlackStuff Newcomer, in training

    You have quite a cheek to call your father names!
    Your own PC is just as infected as his, so who has egg on his face?
    And all this because both of you INSIST on using Avant, which is still IE, or mutton dressed up as lamb!
Thread Status:
Not open for further replies.