Shopping Wizard and Search Extender

[spyproblem]

Hello,

My computer seems to be infected with the spyaxe spyware. I ran Hijack This and pasted below is the log. Can someone please help me out with this?

Logfile of HijackThis v1.99.1
Scan saved at 7:55:13 PM, on 12/2/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\rundll32.exe
C:\HJT\HijackThis.exe

O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\msgz.exe (file missing)
O23 - Service: Contivity VPN Service (ExtranetAccess) - Nortel Networks NA, Inc. - C:\Program Files\Motorola MVP\Extranet_serv.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\System32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Unknown owner - C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)




Thanks,
SpyProblem

 

[spyproblem]

Can anyone please help me with this? I am desperate. Is it safe to use the computer with this spyware on my computer?

Thanks,
Spyproblem.

 

[IronDuke]

Firstly do an online scan at Trend.
Then read How to remove Begin2Search / CoolWebSearch and other Nasties.
and How to post your Hijackthis log-file as an ATTACHMENT.
Download and run Ewido.

Read: How to remove Trojans and its ilk!

Your log was incomplete.

 

[spyproblem]

Thanks a lot for your suggestions. I followed all the steps. I can no longer see the programs "Shopping Wizard", etc., in my "Add/Remove programs". But the desktop still has the message "Spyware infection - Your system is infected ...". Attached is the latest Hijack this log. Please help me out. I hope this log is complete.

Thanks
Spyproblem

 

[IronDuke]

No log attached.

Right click on the desktop and deselct "Active Desktop".

 

[spyproblem]

Thanks for your suggestion. Now it seems there is no trace of spyware. I will scan once more with all the utilities.