Really need computer help

[Randallw]

Ok here's the deal, through no fault of mine something got installed on my computer. I have spent the last two days trying to fix it and have reached the stage where I don't believe I can do any further. This something is now popping up adds every 30 seconds or so. I have the following to fight it

Ad-Aware
My Virus detector
CWshredder
Spysubtract (with venus spytrap)
Hijack this

anyway I have got to the stage where Venus detects software attempting to change my hosts file configuration every 30 seconds or so. This is just as annoying since it stays on the top of my desktop and I have to deny every attempt. Apart from the hosts stuff (and I found the file) but do not have the confidence or knowledge to muck around with it. Every attempt has the following info

127.0.0.1 adwave.com EVENT: HOST:127.0.0.1

apart from adwave I also keep finding files named Drsmartload and such which I delete when I find. I am thinking I need to get professional help but I though I'd try you guys first (things always seem to go wrong on a friday so I have to go all weekend before I get help). I am appending a hijackthis log. I know gamespy or something has a bad reputation but I know that didn't cause it and I need it to play games (which I can't do now as the ^@#$#$% adds/change detector pops up every 30 seconds)

[Atrocities]

My god whatever you have... please don't spread it around. If you have done all of that and cannot find the problem then I would say that the software you used isn't doing what its suppose to be doing.

Try PestPatrol, or Stinger... let me the Stinger link... it looks for trojans and kills them. http://vil.nai.com/vil/stinger

I would also ditch your viruse protection and try using McAfee or even *shudder* Nortan. You can also do an on line scan using Pandasoft. http://www.pandasoftware.com/products/ActiveScan.htm

Good luck.

[Atrocities]

One thing, this pop up you see, is it like a windows messinger box? If so you will need to go to MS and find a way to turn that off. There is an internal messinger that adware ****ers have figured out how to tap into to cause pop ups. It took me a very long time to find out how to have it turned off. But MS has an instruction page on it.

[Nomis]

If your anty-spyware isn't working you can try solve this by yourself.

Most of spywares, trojans, and other annoyances like bonus toolbars and popups, are just simple dynamic linked libraries (not always have .dll extension, but in fact they are .dlls). Usually can be found in /Windows or /Windows/System. Sort these dirs by modification date and look at latest modified files. If you find something like mfczzx.dll, glajfr.aux etc... that could be what you are seeking.
Deleting files from this dirs is a serious risk, so I suggest doing some backups

You can also try to run regedit and find what you've got in HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run
It's possible that links to some spywares are there.
(something like "Rundll32.exe strange.dll")

If everything fails... reinstalling system always helps.

[Thermodyne]

What OS are you running? I'll assume it's XP sp2. But advice will work for sp1 and win2k also.

OK, Try a run with the MS antispyware program.
MS Downloads

You will have to have a legit install of your OS.

Then Turn off the messanger service.

Then replace your host file with the one attached.


I don't see a good AV program in your list. What are you running? Is it still updating?

Are your MS patches up to date?

I would also recomend that you switch to Firefox as a browser. Ver. 1.5 was just released. At the very least turn off the popups in IE.

Use safemode and MSConfig to controll what loads untill you get it fixed.

[Xrati]

A couple of quickie things you can try. Go to windows "add/remove programs" and see if there's anything listed there that YOU didn�t install. Next go to the 'startup menu bar' and under "Set Program Access and Defaults" turn off your messenger service as already mentioned. Then do an [ctrl] + [alt] + [delete] and see if you notice any processes that are running you don�t recognize. Note: (You should always check this window and make a note of how many processes you normally have running.) Try downloading �Spybot Search and Destrroy it does a good job of finding problems before they start. Works well on anything you pick up too!

Good Luck and Good Hunting

[Atrocities]

One more thing, get a good firewall program. Can never be too safe these days.

[Thermodyne]

That should read "good firewall appliance". Software firewalls are not enough. They are really only a second line of defense.

[Xrati]

I'm starting to think that my buddies idea is one of the best things to do. Get yourself a cheap computer, basic CD/DVD burner, install basic OS and your ISP software. NO PERSONEL info at all... Make a copy of it on CD/DVD and your ready to go. It's now your firewall. You can later add any programs you need for on-line ventures. Your other computers AV software and spyware can protect itself from info burned to it or you can risk networking it (not recommended).

[Fyron]

You also might want to post a Hijack This log report and info on what you have tried on DSL Reports and get advice from the experts there, if you can't fix it by doing what has been posted here.

Atrocities said:
I would also ditch your viruse protection and try using McAfee or even *shudder* Nortan.

Please do not suggest Norton again... that crap is more of a virus than what it tries to clean up...