several infections help please

  • Thread starter Thread starter lynn
  • Start date Start date
L

lynn

i ran ms spyware scan and it did not find any of these
i ran nortons free scan and it found these 6
i need easy to do and understand instructions on how to
permently remove. i'm not a guru. i'm barely computer
literate. heres what i found
please help if you can.
and thanks a lot.

c:\windows\system32\p6wzl2q.dll
adware.margoc
c:\windows\system32\vzfndw30104lib.dll
adware.neededware
c:\windows\downloaded program files\conflict.1
adware.gator
c:\documents and settings\owner\installer_marketing35.exe
adware.bargainbuddy
c:\documents and settings\owner\ssk3_b5 verticlick 8.exe
adware.surfsidekick
c:\windows\system32\wshrm.exe
trojan.adwaheck

i also found under start>run regedit
hkey_local_machine\software\microsoft\windows\
currentversion\run

hotkeyscmds
windows\system32\hkcmd.exe (is this the trojan)

nwiz
nwiz.exe/installquiet/keeploaded/nodetect
(i thought this sounded very suspicious)

vzxf
windows\system32\vzxf.exe (is this adware.neededware)
thanks again
 
Hi lynn here's a few tips to help you get cleaned up

Download Ccleaner

http://download.ccleaner.com/download119bin.asp


Turn off system restore > goto start then right click my
computer > goto properties >then system restore and
press ' Turn off system restore ' then press apply then
exit

Enable hidden files and folders:

Go to My Computer->Tools/View->Folder Options->View tab
and make sure that 'Show hidden files and folders'
(or 'Show all files') is enabled. Also make sure
that 'Display the contents of system folders' is checked.

Windows XP's search feature is a little different. When
searching you click on 'All files and folders' on the
left pane,
click on the 'More advanced options' at the bottom. Make
sure that Search system folders, Search hidden files and
folders, and Search subfolders are checked.



Reboot into safe mode (reboot and keep tapping F8 untill
you see the option page then choose safe mode)

Check add/remove screen for Bargain buddy & Gator and
remove if found


delete these files when in safe mode :


c:\windows\system32\vzxf.exe
c:\windows\system32\p6wzl2q.dll
c:\windows\system32\vzfndw30104lib.dll
c:\windows\downloaded program files\conflict.1
c:\documents and settings\owner\installer_marketing35.exe
c:\documents and settings\owner\ssk3_b5 verticlick 8.exe
c:\windows\system32\wshrm.exe


also remove the run command for windows\system32\vzxf.exe

and SurfSideKick 2 if found using reg edit

Check in both of these area's

'HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \
CurrentVersion \ Run'

'HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \
CurrentVersion \ Run'




Check for these folders and delete if found :

c:\programfiles\SurfSideKick 2\
c:\Program Files\Bargain Buddy
c:\Program Files\Net2Phone CommCenter



Use Ccleaner on all 3 settings (windows,applications &
issues) and remove anything found


Then reboot and check your system again


The problem is that 2 of the adware programs you have use
random filenames so this makes giving removal
instructions very difficult if the problem isnt solved
can you download Hijack This and post the log and i will
let you know if there's any malicious entries showing,but
follow the above first and remove as many of the files
listed as you can.


First right click desktop or cdrive,choose new then new
folder name it hijack or similar and press enter.

Download Hijack this

http://www.spywareinfo.com/~merijn/files/hijackthis.zip


Put it into the folder you created on cdrive or desktop
Extract and run,choose to run a scan and save the logfile
When the scan is finished it will open the results in
notepad post that results page if you are still having
problems with this.


Regards Andy Manc
 
THANK YOU FOR ALL YOUR HELP
I STILL HAVE TWO DETECTIONS
I RAN SPYBOT, AD-AWARE, & MASA ALL SAY A-OKAY
BUT WHEN I RUN THE ONLINE NORTONS SYMANTEC FREE SCANS
I GET THESE TWO STUPID THINGS(WIERD HUH)!!!!!!!
ADWARE.NEEDEDWARE AND ADWARE.GATOR
SO I FOLLOWED YOUR INSTRUCTIONS AS BEST AS I
COULD AND WENT TO HIJACK THIS AND POSTED LOG

THANKS AGAIN

GOT RID 4 OF 6 AND FOR ME, NOT TO SHABBY
 
Back
Top