Virus Alert in taskbar HElp!!

B

BiGg RiE

Joined
Jun 11, 2006
Messages
1
Reaction score
0
There's a little icon in my task bar that flashes a green wheel chair & then a red circle with a red line through it. And when the mouse us placed over it it reads "virus alert!" i need help removing it please.

my hijackthis log file is as follows:

Logfile of HijackThis v1.99.1
Scan saved at 9:27:04 AM, on 6/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
M:\WINDOWS\System32\smss.exe
M:\WINDOWS\system32\winlogon.exe
M:\WINDOWS\system32\services.exe
M:\WINDOWS\system32\lsass.exe
M:\WINDOWS\system32\svchost.exe
M:\WINDOWS\System32\svchost.exe
M:\WINDOWS\system32\LEXBCES.EXE
M:\WINDOWS\system32\spoolsv.exe
M:\WINDOWS\system32\LEXPPS.EXE
P:\Programs\Grisoft\AVGFRE~1\avgamsvr.exe
P:\Programs\Grisoft\AVGFRE~1\avgupsvc.exe
P:\Programs\Grisoft\AVGFRE~1\avgemc.exe
M:\WINDOWS\system32\nvsvc32.exe
P:\Programs\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
M:\WINDOWS\system32\svchost.exe
M:\PROGRA~1\COMMON~1\Stardock\SDMCP.exe
M:\WINDOWS\SOUNDMAN.EXE
M:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
M:\Program Files\ASUS\Ai Booster\OverClk.exe
M:\Program Files\UltraMon\UltraMon.exe
M:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
P:\Programs\PowerISO\PWRISOVM.EXE
M:\Documents and Settings\BiGg RiE\My Documents\DAEMON Tools\daemon.exe
P:\Programs\Lexmark X6100 Series\lxbfbmgr.exe
P:\Programs\Grisoft\AVGFRE~1\avgcc.exe
P:\Programs\Lexmark X6100 Series\lxbfbmon.exe
M:\WINDOWS\system32\ctfmon.exe
M:\WINDOWS\system32\wuauclt.exe
P:\Programs\Ahead\Ahead\data\Xtras\mssysmgr.exe
P:\Programs\Stardock\ObjectDock\ObjectDock.exe
P:\Programs\Macromedia\Flash 8\Flash.exe
P:\Programs\ScreenPrint32\ScreenPrint32.exe
P:\Programs\Grisoft\AVGFRE~1\avgw.exe
M:\WINDOWS\system32\wscntfy.exe
M:\WINDOWS\System32\svchost.exe
M:\WINDOWS\system32\dcomcfg.exe
M:\WINDOWS\system32\atmclk.exe
M:\WINDOWS\system32\rundll32.exe
M:\Program Files\Mozilla Firefox\firefox.exe
M:\WINDOWS\explorer.exe
M:\Program Files\UltraMon\UltraMonTaskbar.exe
M:\WINDOWS\system32\dwwin.exe
P:\Programs\Lavasoft\AD-AWA~1\Ad-Aware.exe
M:\WINDOWS\system32\dwwin.exe
P:\Programs\Adobe\Acrobat 7.0\Distillr\AcroTray.exe
P:\Programs\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
M:\WINDOWS\system32\WISPTIS.EXE
D:\Documents and Settings\BiGg RiE\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - P:\Programs\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Nothing - {686a161d-5bd1-4999-8832-6393f41e564c} - M:\WINDOWS\system32\hp100.tmp
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - M:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - %SystemRoot%\system32\browsera.dll (file missing)
O2 - BHO: ZToolbar Activator Class - {da7ff3f8-08be-4cac-bc00-94d91c6ae7f4} - M:\WINDOWS\system32\azesearch4.ocx (file missing)
O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - M:\WINDOWS\system32\iasada.dll (file missing)
O3 - Toolbar: Search Toolbar - {a19ef336-01d4-48e6-926a-fe7e1c747aed} - M:\WINDOWS\system32\azesearch4.ocx (file missing)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [VirtualCloneDrive] "M:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [Launch Ai Booster] "M:\Program Files\ASUS\Ai Booster\OverClk.exe"
O4 - HKLM\..\Run: [NVIDIA nTune] "M:\Program Files\NVIDIA Corporation\nTune\\nTune.exe" clear
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE M:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE M:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [UltraMon] "M:\Program Files\UltraMon\UltraMon.exe" /auto
O4 - HKLM\..\Run: [SunJavaUpdateSched] M:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [PWRISOVM.EXE] P:\Programs\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [DAEMON Tools] "M:\Documents and Settings\BiGg RiE\My Documents\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Lexmark X6100 Series] "P:\Programs\Lexmark X6100 Series\lxbfbmgr.exe"
O4 - HKLM\..\Run: [AVG7_CC] P:\Programs\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NeroFilterCheck] M:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ScreenPrint32] P:\Programs\ScreenPrint32\ScreenPrint32.exe -startup
O4 - HKCU\..\Run: [ctfmon.exe] M:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PhotoShow Deluxe Media Manager] P:\Programs\Ahead\Ahead\data\Xtras\mssysmgr.exe
O4 - HKCU\..\Run: [Steam] P:\Gamez\Valve\Steam\\Steam.exe -silent
O4 - Startup: Stardock ObjectDock.lnk = P:\Programs\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = M:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://P:\Programs\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://P:\Programs\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - M:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - M:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - P:\Programs\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - M:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - M:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: MCPClient - M:\PROGRA~1\COMMON~1\Stardock\mcpstub.dll
O20 - Winlogon Notify: WBSrv - P:\Programs\Stardock\WINDOW~1\wbsrv.dll
O23 - Service: AdobeVersionCue - Adobe Sytems - P:\Programs\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - P:\Programs\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - P:\Programs\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - P:\Programs\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - M:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Macromedia Licensing Service - Macromedia - M:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - M:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - P:\Programs\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

thanks in advance,

BiGg RiE
 
Run HijackThis, select and fix the following:

M:\WINDOWS\system32\dcomcfg.exe

M:\WINDOWS\system32\atmclk.exe

O2 - BHO: Nothing - {686a161d-5bd1-4999-8832-6393f41e564c} - M:\WINDOWS\system32\hp100.tmp

O2 - BHO: Windows Genuine Tool - {c815ace8-3dbf-4ffd-8231-ab1d21e8b7ee} - %SystemRoot%\system32\browsera.dll (file missing)

O2 - BHO: ZToolbar Activator Class - {da7ff3f8-08be-4cac-bc00-94d91c6ae7f4} - M:\WINDOWS\system32\azesearch4.ocx (file missing)

O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - M:\WINDOWS\system32\iasada.dll (file missing)

O3 - Toolbar: Search Toolbar - {a19ef336-01d4-48e6-926a-fe7e1c747aed} - M:\WINDOWS\system32\azesearch4.ocx (file missing)

You also need to run all the fixes HERE exactly as instructed - then run CCleaner to remove any rubbish left behind (untick the Yahoo Toolbar install option).

Download and install and run Windows Defender, Ad-Aware, Spybot S&D and SpywareBlaster from HERE :thumb:
 
Back
Top