HiJack scan

[GreenDayx3]

Hi all, I'm new here. I need help with this worm. I cant delete it. It says "You need permission to perform this action" And i tried to remove it using nod32 too. But it says "delete file failed" FYI: I din't notice that it was there. BTW: I'm using vista.

HiJackThis.txt

[Melvin_Deal]

Hi Greenday!

 

Wow!! Evidence of several issues, not just one. Unfortunately I have to travel for 5 hours. Hopefully someone else can get back to you sooner... but I will give this some attention as soon as I can. You can start by running hijack, then fixing all entries that end with (no file) or (file missing).... Go ahead and uninstall All of your toolbars! Use revo uninstaller to do this and choose the "advanced" option so you can remove all traces of them. You can find REVO here: http://www.revouninstaller.com/revo_uninstaller_free_download.html

 

The free version will do.

 

You have two Bad guys going on that I will help you with if somebody doesn't before I can.

[Narxis]

O4 - HKCU\..\Run: [Yahoo Messengger] C:\Users\Joshua\Desktop\system3_.exe

 

 

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

 

O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)

 

O9 - Extra button: (no name) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (no file)

 

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.3.7.16.dll/206 (file missing)

 

These should be fixed.

[enoskype]

Hi GreenDayx3,

 

I would fix all of the below if I were you.

 

C:\Users\Joshua\Desktop\system3_.exe

 

R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files (x86)\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL (file missing)

 

O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll

 

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

 

O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - (no file)

 

O2 - BHO: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - (no file)

 

O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - (no file)

 

O3 - Toolbar: Megaupload Toolbar - {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - (no file)

 

O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files (x86)\AskBarDis\bar\bin\askBar.dll

 

O4 - HKCU\..\Run: [Yahoo Messengger] C:\Users\Joshua\Desktop\system3_.exe

 

O9 - Extra button: (no name) - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)

 

O9 - Extra button: (no name) - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (no file)

 

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.3.7.16.dll/206 (file missing)

 

 

If the below one is not imposed by Company Policy (Administrator) or personally by you, fix it too.

 

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

 

 

Cheers.

[Melvin_Deal]

Aye! Thank you Enoskype!

 

I didn't have time to break it down... Thank you!

 

You must run Hijack and fix the items Narxis and Enoskype listed.

 

 

You are trying to run Norton Anti-virus and Avira Anti-virus at same time! The anti-viruses are fighting with each other!

This will cause problems. You must choose one (preferably Avira!) Use the Revo uninstaller, & choose advanced option to hunt down the remnants of Norton/Symantec antivirus.

 

All the toolbars are a huge drag on your system... they also are notorius for spying on you, you gotta get rid of them using revo as well! The anti-viruses are fighting with each other!

 

See post #2 on this thread for a link to Revo, the free version will do!

Good luck!!

[GreenDayx3]

Thx all for the replies

[Melvin_Deal]

Aye Greenday!

 

The forum here says "You're welcome!"

 

We would like to know how things have fared and if your problem is solved? Thanks!