TechSpot

Problem with spyware and hikackthis!

By rob230984
Jan 9, 2005
Topic Status:
Not open for further replies.
  1. hi
    i am having problems with a lot of adware and spyware which is considerably slowing my computer down. i have recently downloaded hijackthis but am not entirely sure how to interpret this log file:


    was wondering if anybody could help me?
    thankyou
    rob

    Attached Files:

  2. Spike

    Spike TS Rookie Posts: 2,371

    Follow the instructions completely in RBS's thread - How to remove Begin2search / CoolWebSearch, if you haven't already, and then post a new HJT log here.

    In all honesty, from looking at your log there, I think you may have made the classic mistake of causing more problems than you had in the first place by installing all manner of potentially nasty "anti-spyware" stuff, when all you really needed were a few simple tools, mentioned in RBS's thread. It's ok, I've seen it on quite a few people's computers. Namely ones where I've set them up, given the owners advice, and found that they'd proceeded to ignore it and go their own way, not understanding why I've said what I have.

    For future reference, I would just stick with the mainstream, well known programs, and stay away from anything written by Joe Bloggs down the road.
  3. rob230984

    rob230984 TS Rookie Topic Starter

    spyware and hijack this

    i have had a look at RBS's thread and have previously installed ad-aware and it does recognise trojan horses etc but in order to remove them i have to register the program. all spyware removers have been the same. i do have avg but this does not recognise such trojan horses as loadqm.exe so i can't get rid of it.could you reccomend any actually free spyware removers. also what adivice could you give me on how to make any changes to the hijackthis log.
    thanks a lot
    rob
  4. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    All programs in my thread are FREE, so what's the problem?
  5. rob230984

    rob230984 TS Rookie Topic Starter

    spyware

    i have previously downloaded ad-aware which was free to download. i scanned the system and it came up with 14 files and 2 trojan horses.the function to remove these had been disabled and it said in order to remove the files i would need to register the program costing $29.
    would you also be able to help me with windows security centre which frequently pops up saying it has detected suspicious network activity and to donload certified software to fix the problem.however even when i donload spyware removers i still get the error message.is this because i still have some spyware that has not been detected or could there be another reason for it?
    thanks
    rob
  6. Spike

    Spike TS Rookie Posts: 2,371

    I've never known ad-aware to require registration before it will remove things from your computer. Are you sure you've downloaded the free version, and perhaps dowloaded demo paid version or something instead?

    Spybot Search and destroy is also free, as is CWS shredder, though there are a number of dodgy places out there that have been offering CWSshredder for sale out there last time I looked for it.
  7. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 8,165

    If this HJT-log is still actual:

    Get rid of this program. With Adaware and Spybot you don't need it.
    C:\SPYWAREVANISHER-FREE\FREESCANNER.EXE

    This program looks dodgy to me, cant't find any info on it.
    C:\PROGRAM FILES\WLAN\GCONFIG\GCONFIG.EXE
    Uninstall it, unless you know what it is.


    In Safe mode, run HJT on its own and let it "fix":
    C:\WINDOWS\SYSTEM\WNMSADCHECK32.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\PROGRAM FILES\WLAN\GCONFIG\GCONFIG.EXE <<-- up to you
    C:\WINDOWS\SYSTEM\PSTORES.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: (no name) - _{8952A998-1E7E-4716-B23D-3DBE03910972} - (no file)
    O4 - HKLM\..\Run: [bpcpost.exe] C:\WINDOWS\SYSTEM\bpcpost.exe
    O4 - HKLM\..\Run: [wnmsadcheck32.exe] wnmsadcheck32.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\RunServices: [VidSvr]
    O4 - HKCU\..\Run: [Spyware Vanisher] C:\SPYWAREVANISHER-FREE\FREESCANNER.EXE -FastScan
    O4 - HKCU\..\RunServices: [Spyware Vanisher] C:\SPYWAREVANISHER-FREE\FREESCANNER.EXE -FastScan
    O4 - Startup: GConfig.lnk = C:\Program Files\WLAN\GConfig\GConfig.exe <<-- up to you
    O15 - Trusted Zone: http://*.xxxtoolbar.com
    O15 - Trusted Zone: http://*.windupdates.com

    When HJT is done, delete the bold files. When a directory is also bold, delete everything in it, including that directory itself.
  8. rob230984

    rob230984 TS Rookie Topic Starter

    spyware

    thanks a lot!
    The Gconfig file is ok it is the program i use to connect to a WLAN.
    the computer is running a lot faster now!
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.