Linux Help
guides forums blogs
Home Desktops Distributions ISO Images Logos Newbies Reviews Software Support & Resources Linuxhelp Wiki

Welcome Guest ( Log In | Register )



Advanced DNS Management
New ZoneEdit. New Managment.

FREE DNS Is Back

Sign Up Now
 
Reply to this topicStart new topic
> Searchmiracle - Please Help
sadler
post Nov 23 2004, 04:16 PM
Post #1


Whats this Lie-nix Thing?
*

Group: Members
Posts: 1
Joined: 23-November 04
Member No.: 4,218



[FONT=Optima][COLOR=blue]
I have this really annoying spyware running on my computer. It is called searchmiracle. Every so often about 5 webpages will popup and and they will be about serachmiracle. I used to have elitebar, but i got rid of that, but i am having real troubles with serachmiracle. I have tried:

-spybot S&D
-adware
-and winpatrol

I have tried to remove the first file from my hijacker log, but every so often it will just come back, with the popups! PLEASE SOMEONE HELP, THIS IS A BRAND NEW COMPUTER sad.gif thanks!!!
Here is my hijacker log....

Logfile of HijackThis v1.98.2
Scan saved at 4:31:44 PM, on 11/23/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:Program FilesWinampwinampa.exe
C:Program FilesLogitechiTouchiTouch.exe
C:Program FilesWinPatrolwinpatrol.exe
C:Program FilesJavaj2re1.4.2_05binjusched.exe
C:Program FilesMSN MessengerMsnMsgr.Exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32wuauclt.exe
C:Program FilesWinampWinamp.exe
C:Program FilesInternet Exploreriexplore.exe
C:Documents and SettingsDefaultLocal SettingsTempTemporary Directory 1 for hijackthis[1].zipHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Page = http://searchmiracle.com/sp.php
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://yahoo.ca/
O4 - HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 - HKLM..Run: [zBrowser Launcher] C:Program FilesLogitechiTouchiTouch.exe
O4 - HKLM..Run: [WinPatrol] C:Program FilesWinPatrolwinpatrol.exe
O4 - HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavaj2re1.4.2_05binjusched.exe
O4 - HKLM..Run: [Sys29] C:windowssystem32winvax32.exe
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesMSN MessengerMsnMsgr.Exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:Program FilesMicrosoft OfficeOfficeOSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by24fd.bay24.hotmail.msn.com/resour...es/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1100199417564
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab
O17 - HKLMSystemCCSServicesTcpip..{C6046E72-792F-45B3-8B1D-5EFE8DDEBDDD}: NameServer = 24.226.1.93,24.226.10.194
Go to the top of the page
 
+Quote Post
michaelk
post Nov 23 2004, 05:42 PM
Post #2


Its GNU/Linuxhelp.net
*******

Group: Support Specialist
Posts: 1,796
Joined: 23-January 03
Member No.: 360



Check this out:
http://securityresponse.symantec.com/avcen...e.elitebar.html
Go to the top of the page
 
+Quote Post
TheDistance
post Nov 25 2004, 02:46 PM
Post #3


Whats this Lie-nix Thing?
*

Group: Members
Posts: 5
Joined: 16-November 04
Member No.: 4,184



I don't mean to be rude, but this isn't exactly the forum to be asking about Windows spyware problems. Hope you luck with your spyware! I had a fun time spending about 2 hours deleting registry keys on my XP Pro system for something called ezula.
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 



RSS Lo-Fi Version Time is now: 16th October 2017 - 05:06 PM