Guest haigyman Posted December 30, 2004 Report Share Posted December 30, 2004 i can't get rid of those icons. I can't right click on them, move them, delete them and i've tried running spybot and a mcafee virus scan. Quote Link to comment Share on other sites More sharing options...
Gall_4185 Posted December 30, 2004 Report Share Posted December 30, 2004 you got any unusual toolbars active or even installed? Go through add/remove programs and have a look for anything suspicious Quote Link to comment Share on other sites More sharing options...
Penny Posted December 30, 2004 Report Share Posted December 30, 2004 put them in a folder? or do a search on them and delete them from the search results? dunno, not a pooter boff. Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted December 30, 2004 Report Share Posted December 30, 2004 i've tried going through add/remove programs but there's nothing amiss. Quote Link to comment Share on other sites More sharing options...
Gall_4185 Posted December 30, 2004 Report Share Posted December 30, 2004 nothing like 'my search bar' there? I've had that in the past from kazaa and similar programs as well Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted December 30, 2004 Report Share Posted December 30, 2004 nah it's completely fine, there is a weird toolbar when i go into internet explorer, nestled in jsut under the address bar. it has a search thing at the far left then various tabs with "poker" and such like on them. I dunno how to get rid of it, but i usually use firefox anyway. Quote Link to comment Share on other sites More sharing options...
Gall_4185 Posted December 30, 2004 Report Share Posted December 30, 2004 that'll be the cause then. It should be in add/remove programs,but if not it'll have it's own folder in your hard drive,program files most likely. Something like c:\Program Files\My Search Now Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted December 30, 2004 Report Share Posted December 30, 2004 i'm not finding any folder, and i did a search for "my search" and it came up negative. Quote Link to comment Share on other sites More sharing options...
Gall_4185 Posted December 30, 2004 Report Share Posted December 30, 2004 I was just using that as an example,mainly because I know that's the file that comes with Kazaa Lite[and therefore how I got it] Quote Link to comment Share on other sites More sharing options...
Larsen B Posted December 30, 2004 Report Share Posted December 30, 2004 I have these too! Quote Link to comment Share on other sites More sharing options...
N.M Posted December 30, 2004 Report Share Posted December 30, 2004 Presuming that the icons are shortcuts, look at the properties of each of them to find the location of the file. From here you can either choose to delete them or some other alternative that I'm unsure of at the moment... * runs away * Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted December 30, 2004 Report Share Posted December 30, 2004 they're not short cuts and i can't right click on them Quote Link to comment Share on other sites More sharing options...
Guest onlynik Posted December 30, 2004 Report Share Posted December 30, 2004 Have you updated the defs in spybot? Quote Link to comment Share on other sites More sharing options...
Guest gilly Posted December 30, 2004 Report Share Posted December 30, 2004 I had them.. dunno if I still do. I blame msn messenger.. Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted December 30, 2004 Report Share Posted December 30, 2004 i got them while looking at a picture on google Quote Link to comment Share on other sites More sharing options...
N.M Posted December 30, 2004 Report Share Posted December 30, 2004 I blame msn messenger..Many of the third part add-ons that people download, like Messenger Plus, contain many of these sort of things. Quote Link to comment Share on other sites More sharing options...
Dayeth Posted December 30, 2004 Report Share Posted December 30, 2004 or the infamouspicture.jpg.exe...a personal fav Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted December 30, 2004 Report Share Posted December 30, 2004 i downloaded spysweeper and that nailed the little bastards, thanks everyone Quote Link to comment Share on other sites More sharing options...
Guest HARRY Posted December 30, 2004 Report Share Posted December 30, 2004 Look for unnecessary processes in task manager aswell, similar to worms, as they take up memory usage. If you see stuff like "searchbarcash.exe", locate your Temp folder in your local settings directory and delete the executable files Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted January 2, 2005 Report Share Posted January 2, 2005 aye so, the icons just keep coming back whenever i reboot my computer, and now spysweeper isn't getting rid of them - WTF Quote Link to comment Share on other sites More sharing options...
Guest Charity Case Posted January 2, 2005 Report Share Posted January 2, 2005 or someone or something has changed your wallpaper to include the icons? Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted January 2, 2005 Report Share Posted January 2, 2005 no, although that is a cunning idea Quote Link to comment Share on other sites More sharing options...
Guest Charity Case Posted January 2, 2005 Report Share Posted January 2, 2005 it is that Can you post the results from Hijackthis up? it might make it a lot easier.http://www.spychecker.com/program/hijackthis.html Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted January 2, 2005 Report Share Posted January 2, 2005 Logfile of HijackThis v1.99.0Scan saved at 16:59:31, on 02/01/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\hkcmd.exeC:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeC:\Program Files\Dell\Media Experience\PCMService.exeC:\Program Files\Intel\Modem Event Monitor\IntelMEM.exeC:\WINDOWS\system32\dla\tfswctrl.exeC:\Program Files\CyberLink\PowerDVD\DVDLauncher.exeC:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Program Files\Real\RealPlayer\RealPlay.exeC:\PROGRA~1\mcafee.com\vso\mcvsshld.exeC:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exeC:\Program Files\Messenger Plus! 3\MsgPlus.exec:\progra~1\mcafee.com\vso\mcvsescn.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\Webroot\Spy Sweeper\SpySweeper.exeC:\Program Files\Internet Explorer\iexplore.exeC:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exec:\progra~1\intern~1\iexplore.exeC:\Program Files\Yahoo!\Messenger\ymsgr_tray.exec:\progra~1\mcafee.com\vso\mcvsftsn.exeC:\Program Files\MSN Messenger\msnmsgr.exec:\PROGRA~1\mcafee.com\vso\mcvsrte.exeC:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exec:\PROGRA~1\mcafee.com\vso\mcshield.exeC:\WINDOWS\System32\alg.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Windows Media Player\WMPLAYER.EXEC:\Program Files\Mozilla Firefox\firefox.exeC:\Documents and Settings\Calum\My Documents\Downloaded Files\hijackthis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/mywayR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://web.dwzjtmxwfmpwzjjovq.com/g7N_yFgTWYB8Rs5wNYKQtIqv5wKqF0BoGUnxdeIdkbXmXeFMIG7/fNYXoOGJxkbO.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.widrkhmcmwe.net/g7N_yFgTWYBdb2DadkrFZ8NtNfxa7_5yXP8Yp8wRK3E.htmlR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.co.uk/mywayR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.co.uk/mywayR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.co.uk/mywayO2 - BHO: (no name) - {80A323B8-A5B4-1DDB-E073-A5706FD98452} - (no file)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dllO3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dllO4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exeO4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeO4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"O4 - HKLM\..\Run: [intelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exeO4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exeO4 - HKLM\..\Run: [updateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /rO4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktaskO4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exeO4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\McUpdate.exeO4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYERO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exeO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [thebrowseeqfind] C:\Documents and Settings\All Users\Application Data\Show Live The Browse\Beep keep.exeO4 - HKCU\..\Run: [meowcash] C:\DOCUME~1\Calum\APPLIC~1\STUPID~1\Dent play.exeO4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quietO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dllO9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO23 - Service: McAfee.com McShield - Unknown - c:\PROGRA~1\mcafee.com\vso\mcshield.exeO23 - Service: McAfee SecurityCenter Update Manager - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exeO23 - Service: McAfee.com VirusScan Online Realtime Engine - Networks Associates Technology, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exeO23 - Service: McAfee Personal Firewall Service - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MPFSERVICE.exeO23 - Service: Intel NCS NetService - Intel® Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe Quote Link to comment Share on other sites More sharing options...
Guest haigyman Posted January 2, 2005 Report Share Posted January 2, 2005 is that what you meant? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.