computer question?

Okay, so I've spent the last three or four hours trying to figure out why my internet browser came up, but the computer and dsl would not connect to the internet. The cables were fine, the lights were on on the dsl box. Come to find out, I was doing a little cleanup last night and accidentaly erased my old internet connection through my dail-up company and didn't make a new one for my dsl modem. Anywho, that works now obviously. So, my new problem I hope someone can help me with is spyware doctor. It doesn't want to open. I know I have only a 32 gig hard drive and the space on there is wearing thin. Could that be the cause of this. I am planning on getting a larger hard drive in the near future, but it used to open no problem. It all of a sudden stopped working and I am starting to get all these pop-ups saying that I am the 1 millionth visitor and click here to claim my prize and that sort of thing. i am starting to get tired with it. I need to open spyware doctor to clean out my computer to get rid of these, but spyware doctor does not open. I double click on it and it asks me what user I want to use it under. I have the compaq owner and my own user with a password so I have my own settings. I click on me and enter my password and click open, but nothing. It used to do that and I would enter my password and it would open after a bit, but now it does nothing. Would getting a larger hard drive solve this problem. I am always getting the low disk space messages too. I deleted some of the programs I don't use and cleaned out all the cookies and cache's and now I am not getting the message anymore. Also, my disk drive won't stay shut unless I put a disk in it, bu then the disk runs and I don't want it to do that. My only option is to leave the disk driver open with no disk. I try to shut it, but it just opens again. I am planning on soon taking the tower somwhere to see what the problem is, but if I can rectify the situation on my own, I would like to do so and save myself some dough. Any and all help is greatly appreciated as my patience is growing thin with this computer. Thank you again.

Also i forgot one other thing, my back button on my browser does not work that good. I have to click on it like 8 or 9 times fast to get it to go back. I know that it doens't sound like that much of a problem, but it is a pain when you keep clicking on it forgetting it doesn't work right.

Download HiJack this log. Just do a Google search for HIjack this.  Do the log and post it here.  I have been becoming better at reading it and if I cant I will hav some friends look at it.  Try this and I will see if I notice anything.  Definatly a new HD will solve the issue but you will be left with nothing and start from scratch. Lets the the HiJackThis first then I will try to figure something out for you.

I've been happy with Spybot Search & Destroy in keeping me spyware free... The Immunize function is nice

quote:

ORIGINAL: drperry

I've been happy with Spybot Search & Destroy in keeping me spyware free... The Immunize function is nice

I used the same thing, and then got something that that couldnt take care of so I got Stopzilla which worked but then I decided I didn't want to pay for it anymore. AVG free is agood program to have for viriuses and ZoneAlarm is a good fire wall.

I'd use Nod32 + Noadware or counterspy (if you use XP) I have yet been able to pack a virus (my hobby) that Nod32 cant find plus it used very minimal cpu time.

ur going with a solo 18!!!!?????

I already have HijackThis on my computer from a previous problem I had with internet explorer. That is why I have Opera as my internet browser right now. Also I had a problem with paint and it had to be deleted and now I don't have the hard disk space to download anything that has to do with paint. I was looking at paint.net, but until I get a new hard drive, nothing doing. I will run HijackThis and see what it does.

Okay, I ran it. Here's the log.

Logfile of HijackThis v1.99.1
Scan saved at 9:08:52 AM, on 6/2/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Spyware Doctor\sdhelp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\QTTask .exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\BroadJump\Client Foundation\CFD.exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
C:\Program Files\QuickTime\QTTask .exe
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask .exe
C:\Program Files\Opera\Opera.exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\BroadJump\Client Foundation\CFD .exe
C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB .exe
C:\WINDOWS\system32\ps2 .exe
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch .exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\HijackThis.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
F3 - REG:win.ini: load=C:\WINDOWS\system32\sstqq.exe
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask .exe" -atboottime
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [{40-08-85-57-ZN}] C:\WINDOWS\system32\gbkmkhot .exe .exe MSM002
O4 - HKLM\..\Run: [ISUSScheduler] "C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\issch.exe" -start
O4 - HKLM\..\Run: [509408f8] rundll32.exe "C:\WINDOWS\system32\upnfhyvu.dll",b
O4 - HKLM\..\Run: [BM53a73b64] Rundll32.exe "C:\WINDOWS\system32\eghdlbbi.dll",s
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YAHOOM~4 .EXE" -quiet
O4 - HKCU\..\Run: [EPSON Stylus CX4400 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATICAA.EXE /FU "C:\DOCUME~1\David\LOCALS~1\Temp\E_S31.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [MySpaceIM] C:\Program Files\MySpace\IM\MySpaceIM.exe
O4 - HKCU\..\Run: [Spyware Doctor]

C:\WINDOWS\system32\ps2.exe Has me iffy, it shows up as HP printer please confirm.

Also
These are iffy as well.
O4 - HKLM\..\Run: [509408f8] rundll32.exe "C:\WINDOWS\system32\upnfhyvu.dll",b
O4 - HKLM\..\Run: [BM53a73b64] Rundll32.exe "C:\WINDOWS\system32\eghdlbbi.dll",s

This looks strangely familiar to the virus I'm cleaning off a co-workers machine right now.

Spybot Search & Destroy identified the virus I'm dealing with as Virtumonde.generic.  I am running the fixes now.  This one is a pesky little SOB!

Okay, the back button works like a charm now, but the pics on pages are turning into pop-up adds. Like the featured sponsors on the side of blazerforum, is turning into a pop-up add for a spy scan saying that my privacy is in danger! Spyware doctor usually gets rid of these things for me, but since it doesn't work, I canit get rid of them. Spybot didn't get rid of the pop-ups. Should I delete those entreis when I do a HijackThis scan Brett.

Dav can you open .rar files ?

BTW go to live chat.

Okay, the pop-ups are still popping up even after the noadware scan. I found on another website that I double click on the spyware doctor icon on the desktop and click ctrl-shift-esc. That opens the windows task manager in the proccesses tab. I double click on the spyware doctor icon and swdoctor.exe appears and then dissaperas after a couple of seconds. I cannot open properly. Although sdhelp.exe is listed. I emailed pctools and waiting for a reply.

The best thing for you to do is use an anti virus and scan for it. I'd use Nod32, You cant download the free trial which would do it for you.

Did you mean to say I can download it, or should I look for a free virus scanner somewhere.

BUMP! Okay, I downloaded a virus scanner and ran it as deep scan of the hard drive and the memory and it returned nothing. The only thing it didn't scan for was adware, and noadware shows multiple adwares. I fix the items and the next time I do a scan, they show up again. I even emailed pctools and got a return back saying without the order #, they can't help me. But I can't find that out cause I can't open it . Tomorrow I am getting a larger hard drive from Target that is on sale. A 250gig for 88 bucks. I am going to try and run the noadware, copy the names of the files and go to download.com and search for a tool to fix it. Would that work? Noadware said that there are 3 files and 5 other.

With persistent problems like this, I typically will google the filenames (unless they are random crap) and/or the name/type of adware/virus/whatever that the scanner returns. 

Have you tried Spybot Search & Destroy?

Yes, I have spybot on my computer and I have run it and it detected stuff and I pressed delete these items, but then I scan again and it finds them again. I will run it and post the findings on here so maybe someone can tell me what to look for. The pop-ups are not coming up anymore, but stuff is still found. I know I deleted one of the files that spybot found and that particular one is not found anymore and everything works fine still. I tried to open spyware doctor again and I had the task manager window open in processes and when I double clicked on spyware doctor, swdoctor.exe pops up and then dissapears after about 4 seconds. It used to stay up for about 2.

Okay-here is the spybot search and destroy results:

AstaKiller

Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecutiveHooks\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}

Smitfraud-C. Toolbar888

Class ID
HKEY_CLASSES_ROOT\CLSID\{6D794CB4-C7CD-4c6f-BFCD-9B77AFBDC02C}

Virtumonde

Browsre helper object
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CuurentVersion\Explorer\BrowserHelperObjects\{6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C}

Zenosearch

Executable
C:\WINDOWS\system32\gbkmkhot.exe

Text file
C:\WINDOWS\system32\msnav32.ax