PDA

View Full Version : crazywinnings, static.topconverter spyware


theThinker
01-16-2005, 04:02 PM
Can't rid of the last two! Posted my latest HijackThis log.

Logfile of HijackThis v1.97.7
Scan saved at 3:59:09 PM, on 1/16/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Program Files\Google\Gmail Notifier\G001-1.0.24.0\gnotify.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\Labtec Wireless Desktop\MagicKey.exe
C:\WINDOWS\System32\CTSvcCDA.EXE
C:\Program Files\Labtec Wireless Desktop\MulMouse.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Labtec Wireless Desktop\OSD.EXE
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\Documents and Settings\Paul.1R1A1Z1O1R1\My Documents\Hijack This\HijackThis.exe


O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.static.topconverting.com

Dragon
01-16-2005, 09:59 PM
well at least it didnt give your last name too, lol.

did you look in zone alarm?

Jason425
01-16-2005, 11:37 PM
have you run adaware and spybot? give M$'s prog a try too...