TechSpot

Shopping Wizard and Search Extender

By spyproblem
Dec 2, 2005
  1. Hello,

    My computer seems to be infected with the spyaxe spyware. I ran Hijack This and pasted below is the log. Can someone please help me out with this?

    Logfile of HijackThis v1.99.1
    Scan saved at 7:55:13 PM, on 12/2/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\ibmpmsvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\HJT\HijackThis.exe

    O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\msgz.exe (file missing)
    O23 - Service: Contivity VPN Service (ExtranetAccess) - Nortel Networks NA, Inc. - C:\Program Files\Motorola MVP\Extranet_serv.exe
    O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Unknown owner - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe (file missing)
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)




    Thanks,
    SpyProblem
     
  2. spyproblem

    spyproblem TS Rookie Topic Starter

    Can anyone please help me with this? I am desperate. Is it safe to use the computer with this spyware on my computer?

    Thanks,
    Spyproblem.
     
  3. IronDuke

    IronDuke TS Rookie Posts: 856

  4. spyproblem

    spyproblem TS Rookie Topic Starter

    Thanks a lot for your suggestions. I followed all the steps. I can no longer see the programs "Shopping Wizard", etc., in my "Add/Remove programs". But the desktop still has the message "Spyware infection - Your system is infected ...". Attached is the latest Hijack this log. Please help me out. I hope this log is complete.

    Thanks
    Spyproblem
     
  5. IronDuke

    IronDuke TS Rookie Posts: 856

    No log attached.

    Right click on the desktop and deselct "Active Desktop".
     
  6. spyproblem

    spyproblem TS Rookie Topic Starter

    Thanks for your suggestion. Now it seems there is no trace of spyware. I will scan once more with all the utilities.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...