Here I am again, with yet another problem. You guys have helped me, my mom, my sister, and I'm hoping you'll be able to help my brother now. And it also seems that something else is going on with my computer as well. First off, I'll have my brother download HijackThis, and I'll send you a report of that. His computer is telling him he has a virus or something called "Spyware Quake"? Also some kind of Trojan thing going on. Forgive me if I sound like an idiot, but I'm just you're average girl. I don't know a whole lot about computer viruses and stuff. Anyway, his homepage isn't the same, and all that jazz. So, I'll just attatch a HJT report when he downloads that.

As for my computer, it won't let me change my homepage. After we got rid of the Myzor deal, the homepage changed to msn.com, but won't let me change it from there. Also when I was having the previous problems, I downloaded Webroot Spy Sweeper, and recently its been telling me that I have some things I need to get rid of. So, I'll attatch an HJT log for myself, but I'm not sure if that's what you need. Also, let me know if I should post mine and my brothers problems in seperate threads. Thank yoU!!

Attached Files

hijackthis.log (12.5 KB, 1 views)

Hya ND.

This log is from your brother's pc? I don't see anything in there really sofar. But If it is SpywareQuake then it should show here for sure:


Please download SmitfraudFix (by S!Ri)

Extract the content (a folder named SmitfraudFix) to your Desktop.
Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).

Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consultin...rocessutil.htm



And for your pc, do you have ZoneAlarm installed? And if yes, the free or pro version of it? But indeed please make a separete thread for your own pc, and post a log there.

No, that log was from my PC. I'll keep this thread as my brothers, and I"ll open a new one for me.

And I'll post HIS hjt log when I talk to him tomorrow. Thanks Joe!

Also have him run the Smitfraudfix and post the log from that aswell.

Here's the SmitFraudFix report:

And attatched is the HJT:

SmitFraudFix v2.76Scan done at 11:33:07.12, Thu 07/27/2006Run from C:\Documents and Settings\Carney\Desktop\SmitfraudFixOS: Microsoft Windows XP [Version 5.1.2600] - Windows_NTFix ran in normal mode»»»»»»»»»»»»»»»»»»»»»»»» C:\»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32C:\WINDOWS\system32\mzoeut.dll FOUND !»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Carney\Application Data»»»»»»»»»»»»»»»»»»»»»»»» Start Menu»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Carney\FAVORI~1»»»»»»»»»»»»»»»»»»»»»»» » Desktop»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files C:\Program Files\IntCodec\ FOUND !»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]"Source"="about:Home""SubscribedURL"="about:Home"" FriendlyName"="My Current Home Page" »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler!!!Attention, following keys are not inevitably infected!!!SrchSTS.exe by S!RiSearch SharedTaskScheduler's .dll[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\SharedTaskScheduler]"cholecyst"="{ee2975b6-e8d5-405e-8448-8fe9590f6cfb}"»»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection»»»»»»»»»»»»»»»»»»»»»»»» End

Attached Files

brianshijackthis.log (12.0 KB, 2 views)