Scan your PC for Errors

Member Panel



Join the PC Help Forum Team

Join PC Help Forum on Facebook

Join the PCHF Distributed Computing Teams

Try the NEW PC Help Forum Dark style

Link to PCHF from other parts of the Internet
PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] yyy extension pop ups!!

[Fixed] Hijackthis! Logs - [Fixed] yyy extension pop ups!! posted in the Security & Safety forums; My PC was recently infected with spyware. After hard work and the use of various anti-spyware programs i have managed to restore my PC almost back to normal. I am ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 12-28-2005
Bronze Member
 
Join Date: Dec 2005
Posts: 25
PC Experience: PC Illiterate
sam1_r - See this Members User comments on their Profile page
Default [Fixed] yyy extension pop ups!!

My PC was recently infected with spyware. After hard work and the use of various anti-spyware programs i have managed to restore my PC almost back to normal. I am still getting random pop-ups mainly including ones ending with 'yyy'. Please help me to remove these annoying pop ups.


  #2  
Old 12-28-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hy there Sam1_r , if you have a look in the "Prework" link below in my sig and follow those instructions there , and then post the two resulting log files then im sure whe're gona get rid of those. :smiley:


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #3  
Old 12-30-2005
Bronze Member
 
Join Date: Dec 2005
Posts: 25
PC Experience: PC Illiterate
sam1_r - See this Members User comments on their Profile page
Default Hijack log

Just to recap, i am having problems after recently removing some spyware. I am constantly having annoying pop ups appear, mainly from sites ending in 'yyy' extension. My PC is also slower when loading at startup.

I have included the hijack log, there are 2 Ewido logs also because in the 1st scan i forgot to check the scan every file box.

I appreciate any help. Thanks.
Attached Files
File Type: txt Scan report_20051230.txt.txt (21.5 KB, 1 views)
File Type: txt Scan report1_20051230.txt.txt (2.4 KB, 1 views)
File Type: log hijackthis.log (6.3 KB, 1 views)


  #4  
Old 12-30-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Let's see if we can clean that up for you. :smiley:


Make sure that system restore is still disabled and that hidden files are set to show.


please download and run this tool:

http://www.simplytech.it/L2MRemover/index_e.htm

Then empty Microsoft AntiSpyware's and Pestpatrol's quarentine , and Norton's Nprotect.

After that uninstall "VCClient" in add/remove programs.


Now boot in safemode (hit f8 when booting up) and fix these with hjt:
(if stil present)

R3 - Default URLSearchHook is missing
O4 - HKCU\..\Run: [CU1] C:\Program Files\Common Files\VCClient\VCClient.exe
O4 - HKCU\..\Run: [CU2] C:\Program Files\Common Files\VCClient\VCMain.exe
O4 - HKCU\..\Run: [irfw] C:\PROGRA~1\COMMON~1\irfw\irfwm.exe
O20 - Winlogon Notify: ssldr - ssldr32.dll (file missing)
O20 - Winlogon Notify: Telephony - C:\WINDOWS\system32\c6002gdmg60a2.dll
Delete the files in bold and run Ccleaner.

It looks like you have two AV's and no firewall? If so ,then i would uninstall one AV , or disable its auto protect. And you could have a look in our download section for some free firewalls.

Then reboot and post a new hjt log please.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #5  
Old 12-30-2005
Bronze Member
 
Join Date: Dec 2005
Posts: 25
PC Experience: PC Illiterate
sam1_r - See this Members User comments on their Profile page
Default New HJT file

Thanks for your reply. I had a few problems following your instructions but i did what i could. The problems I had were that i couldn't find where to empty the Pestpatrols quarentine and the VCClient was not in my add/remove programs.

I managed to remove each listing in the HJT that was in your reply apart from the last that wanst there. I also seem to have just one AV in my add/remove program.

Here is my new HJT. Thanks for the Help.
Attached Files
File Type: log hijackthis.log (7.9 KB, 1 views)


  #6  
Old 12-31-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

There isnt always an uninstaller present , but its always better to check first and use that if there is. If it isn't , then its ok to. And looking at the screenshot here:

http://www.pestpatrol.com/files/Imag...sDetected2.jpg

The quarentine should be the "skull and bones" button in the midle.

And the last entry was already removed by the Look2me remover.

The good news is that youre log is clean , but there really are 2 AV's running , Norton and AVG7. Have an other look in add/remove programs and/or youre program files folder.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #7  
Old 12-31-2005
Bronze Member
 
Join Date: Dec 2005
Posts: 25
PC Experience: PC Illiterate
sam1_r - See this Members User comments on their Profile page
Default Worked!

Thanks a lot, there are no more pop-ups. I appreciate all the help. I have also removed 1 of the AV's.

Thanks Again and Happy New Year!!!!



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
Firefox Extension - Gmail Notifier Internet Help 10 09-13-2005 04:48 AM
[Answered] .ZIP Extension gone werid MadGamer Windows XP/2000 4 07-31-2005 04:00 PM
WhoLockMe Explorer Extension v1.04 Beta Hengis Utilities 0 06-13-2005 12:00 PM

All times are GMT +1. The time now is 06:06 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top