YYY65 Ads and Non-Browser Flash Ads Continue to Plague My Computer

By Lyght ยท 7 replies
Jan 1, 2006
  1. OK, I'm getting extremely ticked off at my computer right now. I continue to get redirected to pages mostly with screwed up names, i.e. "onlineshopp-ing.com" etc. and ending in yyy65.html. I am using Mozilla Firefox.

    I am also getting ads that have nothing to do with the browser. They're Flash pop-up ads that continue to come up. I attached a screenshot of one of these ads because I suck at describing things.

    Anyways, I've used Ad-Aware, CCleaner, Spy Sweeper, HijackThis, Microsoft AntiSpyware... the list goes on. These two still persist. MS AntiSpyware seems to have gotten rid of some major spyware, and Ad-Aware too. While using these programs has sped my Internet service back to normal significantly, those two adware programs are giving me hell.

    Here's my HijackThis log:

    Running processes:
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
    C:\Program Files\HP\hpcoretech\comp\hpdarc.exe
    C:\Program Files\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
    C:\Documents and Settings\Owner.EVAN-RF9P3CDTMC\My Documents\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = res://C:\WINDOWS\system32\shdocpe.dll/asst.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchURL = res://C:\WINDOWS\system32\shdocpe.dll/asst.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer Provided by Cox High Speed Internet
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ?
    O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
    O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
    O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
    O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AOL\aim.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Broken Internet access because of LSP provider 'xfire_lsp_11078.dll' missing
    O20 - Winlogon Notify: Controls Folder - C:\WINDOWS\system32\u8ru0i99e8.dll
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: msupdate - C:\WINDOWS\SYSTEM32\msupdate32.dll
    O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

    I have been redirected to these ad sites at least five times just while typing this post. I can barely even post on message boards anymore, and I-- make that six redirects now.

    God have mercy on the souls of the morons who created this crap. I don't know how these people can expect that these ads can make money (well, it also tried to get me to download that fake Antivirus program, WinFixer, nice try, I'm not that stupid) when they annoy the living crap out of people.
  2. Lyght

    Lyght TS Rookie Topic Starter

    I don't mean to be rude, but approximately how long does it usually take to get an answer. This stuff is driving me crazy.
  3. Lyght

    Lyght TS Rookie Topic Starter

    Can someone please help me? :dead:
  4. swker98

    swker98 TechSpot Paladin Posts: 1,077

    on avgrege posts take about a day to get answered
    you have to rember this site is free and most or all of our members are volinteerr
  5. Tedster

    Tedster Techspot old timer..... Posts: 6,002   +15

    obvious you have adware.

    Boot into safe mode
    turn off system restore
    run ad-aware, spybot, and ewido
    run your anti-virus.
    report results
  6. Lyght

    Lyght TS Rookie Topic Starter

    I don't have an antivirus program. Anyways, I've been running Spy Sweeper for awhile now, and since it's been open, none of this has been happening. I think I should just keep it open.
  7. Tedster

    Tedster Techspot old timer..... Posts: 6,002   +15

    What ???? You don't have one! @#%^$#&%$^*&%^&*^&* get one! Running a computer without one is suicide!!!

    There are plenty of free ones like AVG.
  8. swker98

    swker98 TechSpot Paladin Posts: 1,077

    yes without a doubt you need an anti virous andd anti spyware app read this, this this
Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...