Carlo Trentini

I'm not very computer literate so I'll try to explain this as well as I can.

First of all my, system seems to be taking a lot longer to start-up and when I click on IE, which is usually the first thing that I go to, it's unusually slowto open. All the time the HD is whirring away as though I were downloading something or running a system scan .

In IE when preforming a Google search a second window opens which also seems to be some sort of search engine (rpicams.com) that also automatically redirects to another destination such as Ebay for example.

I had Spyware Doctor and AVG installed which I updated and ran but the problem did not dissapear. I then downloaded and ran Ewido, Ad-aware se and Spybot. These also dont seem to have made any difference.


So, at this point I decided to download the Hijack this program so as to have a log ready to post up. This is where things start to get frustrating. OK, so I googled Hijack this, found the relevant site and began to download. A few moments in the download was interupted and the browser closed without warning!! So, I follow the same procedure this time atempting to d/load from diferent location - the D/L is interupted and the browser cloes without warning and I'm left gazing at the wallpaper. I followed the same steps, this time using Firefox but unfortunately with the same results.

I then reffered to the sticky in this section of the forum, deciding to puchase the Panda active scan pro software. After making the purchase, entering the username & password the downoad was initiated only again to be abruptly terminated moments after. Again, the D/L and browser windows closed automatically. Then House call was tried which a Java update was required for upon downloading the Java an error occured and this was also closed.


Now, I'm really at a loss and this problem seems to getting worse and in some way obsructing the downloading of antivirus software.

Any help would be greatly appreciated.

Thanks.

edifier

Try booting into safemode with networking. Then the Panda scan and try downloading HJT again.

Carlo Trentini

Spyware doctor has just informed me that all is not well and produced the folloing error report :

date/time : 2006-10-10, 12:39:18, 892ms
computer name : LAPTOPX
user name : jct
operating system : Windows XP Service Pack 2 build 2600
system language : English
system up time : 12 hours 51 minutes
program up time : 12 hours 50 minutes
processor : Intel(R) Pentium(R) 4 CPU 2.00GHz
physical memory : 77/503 MB (free/total)
free disk space : (C 6.27 GB
display mode : 1024x768, 16 bit
process id : $2a0
allocated memory : 112.02 MB
command line : "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
executable : swdoctor.exe
exec. date/time : 2006-09-07 18:23
version : 4.0.0.2618
madExcept version : 2.7g
exception class : EOleException
exception message : (FindChild)Unexpected error.

main thread ($314):
>> internal error in GetThreadStack:
400085a0 ???

thread $73c: <priority:15>
>> internal error in GetThreadStack:
400085a0 ???

thread $bb0:
>> internal error in GetThreadStack:
400085a0 ???

thread $bc8 (TSubscriptionThread): <priority:-1>
>> internal error in GetThreadStack:
400085a0 ???

thread $bcc:
>> internal error in GetThreadStack:
400085a0 ???

thread $3c0 (TRegMonitorThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $66c:
>> internal error in GetThreadStack:
400085a0 ???

thread $7a0:
>> internal error in GetThreadStack:
400085a0 ???

thread $a28:
>> internal error in GetThreadStack:
400085a0 ???

thread $e14 (TNotiThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $f40 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f44 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f48 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f4c (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f50 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f54 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f5c (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f60 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f68 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f6c (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f70 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f74 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f78 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f84 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f88 (TRegistryHook): <priority:-2>
>> internal error in GetThreadStack:
400085a0 ???

thread $f8c:
>> internal error in GetThreadStack:
400085a0 ???

thread $17c (TWorkerThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $360 (TRegMonitorThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $1c0 (TRegMonitorThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $700 (TRegMonitorThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $7a4 (TRegMonitorThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $81c (TRegMonitorThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $830 (TRegMonitorThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $d4c (TRegMonitorThread):
>> internal error in GetThreadStack:
400085a0 ???

thread $4a0: <priority:15>
>> internal error in GetThreadStack:
400085a0 ???

thread $a10: <priority:2>
>> internal error in GetThreadStack:
400085a0 ???

thread $a84:
>> internal error in GetThreadStack:
400085a0 ???

thread $edc:
>> internal error in GetThreadStack:
400085a0 ???

modules:
00400000 swdoctor.exe 4.0.0.2618 C:\Program Files\Spyware Doctor
01780000 vcl70.bpl 7.0.4.453 C:\Program Files\Spyware Doctor
01a70000 iSHelp.dll 3.6.1.2041 C:\Program Files\Spyware Doctor
027b0000 vbscript.dll 5.6.0.8833 C:\WINDOWS\system32
029a0000 shellexecutehook.dll 4.0.0.172 C:\Program Files\ewido anti-spyware 4.0
02b30000 chilkatxml.dll 4.1.0.2 C:\Program Files\Spyware Doctor
03e20000 genscanner.dll 3.6.0.1005 C:\Program Files\Spyware Doctor\Tools
04240000 iemonitor.dll 3.6.0.2286 C:\Program Files\Spyware Doctor\Tools
042a0000 hostsscanner.dll 3.6.0.2041 C:\Program Files\Spyware Doctor\Tools
042c0000 Immunizer.dll 3.6.0.1060 C:\Program Files\Spyware Doctor\Tools
04300000 PWindow.dll 3.6.0.1020 C:\Program Files\Spyware Doctor\Tools
04840000 iesdpb.dll 3.6.0.2283 C:\Program Files\Spyware Doctor\Tools
04a20000 itoollib.dll 3.6.0.1049 C:\Program Files\Spyware Doctor\Tools
04a70000 keyloggerguard.dll 3.6.0.2040 C:\Program Files\Spyware Doctor\Tools
04ae0000 lspscanner.dll 3.6.0.2053 C:\Program Files\Spyware Doctor\Tools
04af0000 memory.dll 3.6.0.2007 C:\Program Files\Spyware Doctor\Tools
04c10000 networkguard.dll 3.6.0.2031 C:\Program Files\Spyware Doctor\Tools
04c50000 popupblocker.dll 3.6.0.2283 C:\Program Files\Spyware Doctor\Tools
04cb0000 processguard.dll 3.6.0.2075 C:\Program Files\Spyware Doctor\Tools
04d20000 pscanner.dll 3.6.0.1047 C:\Program Files\Spyware Doctor\Tools
04d60000 scheduler.dll 3.6.0.2045 C:\Program Files\Spyware Doctor\Tools
04d90000 regscanner.dll 3.6.0.1030 C:\Program Files\Spyware Doctor\Tools
04db0000 siteguard.dll 3.6.0.2071 C:\Program Files\Spyware Doctor\Tools
04e10000 StartupScanner.dll 3.6.0.2010 C:\Program Files\Spyware Doctor\Tools
04e40000 bhoscanner.dll 3.6.0.2047 C:\Program Files\Spyware Doctor\Tools
04e70000 sdn.dll 3.6.0.1022 C:\Program Files\Spyware Doctor\Tools
04ee0000 actcookie.dll 3.6.2.2129 C:\Program Files\Spyware Doctor\Tools
04f40000 maldetective.dll 3.6.0.1044 C:\Program Files\Spyware Doctor\Tools
04fc0000 iesdsg.dll 3.6.0.2071 C:\Program Files\Spyware Doctor\Tools
05190000 BAScanner.dll 3.6.0.2072 C:\Program Files\Spyware Doctor\Tools
051b0000 diskscanner.dll 3.6.0.2091 C:\Program Files\Spyware Doctor\Tools
051d0000 IMGuard.dll 3.6.0.2005 C:\Program Files\Spyware Doctor\Tools
05210000 actstartup.dll 3.6.1.2118 C:\Program Files\Spyware Doctor\Tools
05250000 browserscanner.dll 3.6.0.2056 C:\Program Files\Spyware Doctor\Tools
05270000 exploitguard.dll 3.6.0.1003 C:\Program Files\Spyware Doctor\Tools
05460000 klg.dat 3.6.0.2040 C:\Program Files\Spyware Doctor\Tools
0d4f0000 ieframe.dll.mui 7.0.5346.5 C:\WINDOWS\system32\en-US
10000000 ikhtool.dll 3.6.1.2006 C:\Program Files\Spyware Doctor
20000000 xpsp2res.dll 5.1.2600.2180 C:\WINDOWS\system32
40000000 rtl70.bpl 7.0.4.453 C:\Program Files\Spyware Doctor
46fe0000 ieframe.dll 7.0.5346.5 C:\WINDOWS\system32
5a000000 swpg.dat 3.6.0.2079 C:\Program Files\Spyware Doctor\tools
5a800000 eg.dat 3.6.0.1003 C:\Program Files\Spyware Doctor\Tools
5ad70000 uxtheme.dll 6.0.2900.2180 C:\WINDOWS\system32
5b860000 NETAPI32.dll 5.1.2600.2952 C:\WINDOWS\system32
5dca0000 iertutil.dll 7.0.5346.5 C:\WINDOWS\system32
5dff0000 IEUI.dll 7.0.5346.5 C:\WINDOWS\system32
5e760000 perfos.dll 5.1.2600.2180 C:\WINDOWS\system32
5edd0000 olepro32.dll 5.1.2600.2180 C:\WINDOWS\system32
61220000 MSH_ZWF.dll 4.10.851.0 C:\Program Files\Microsoft Hardware\Mouse
61410000 urlmon.dll 7.0.5346.5 C:\WINDOWS\system32
63400000 MSRATING.dll 7.0.5346.5 C:\WINDOWS\system32
66000000 MSVBVM60.DLL 6.0.89.64 C:\WINDOWS\system32
662b0000 hnetcfg.dll 5.1.2600.2180 C:\WINDOWS\system32
666f0000 inetmib1.dll 5.1.2600.2180 C:\WINDOWS\system32
6b980000 msscript.ocx 1.0.0.8820 C:\WINDOWS\system32
71660000 Normaliz.dll 6.0.5243.0 C:\WINDOWS\system32
71a50000 mswsock.dll 5.1.2600.2180 C:\WINDOWS\system32
71a90000 wshtcpip.dll 5.1.2600.2180 C:\WINDOWS\System32
71aa0000 WS2HELP.dll 5.1.2600.2180 C:\WINDOWS\system32
71ab0000 ws2_32.dll 5.1.2600.2180 C:\WINDOWS\system32
71ad0000 WSOCK32.dll 5.1.2600.2180 C:\WINDOWS\system32
71b20000 mpr.dll 5.1.2600.2180 C:\WINDOWS\system32
71bf0000 SAMLIB.dll 5.1.2600.2180 C:\WINDOWS\system32
71f60000 snmpapi.dll 5.1.2600.2180 C:\WINDOWS\system32
722b0000 sensapi.dll 5.1.2600.2180 C:\WINDOWS\system32
72d10000 msacm32.drv 5.1.2600.0 C:\WINDOWS\system32
72d20000 wdmaud.drv 5.1.2600.2180 C:\WINDOWS\system32
73000000 winspool.drv 5.1.2600.2180 C:\WINDOWS\system32
732e0000 RICHED32.DLL 5.1.2600.0 C:\WINDOWS\system32
73dc0000 LZ32.DLL 5.1.2600.0 C:\WINDOWS\system32
746c0000 msls31.dll 3.10.349.0 C:\WINDOWS\system32
74c80000 Oleacc.dll 4.2.5406.0 C:\WINDOWS\system32
74d30000 oledlg.dll 5.1.2600.0 C:\WINDOWS\system32
74e30000 RICHED20.dll 5.30.23.1221 C:\WINDOWS\system32
754d0000 CRYPTUI.dll 5.131.2600.2180 C:\WINDOWS\system32
75e90000 SXS.DLL 5.1.2600.2180 C:\WINDOWS\system32
76080000 MSVCP60.dll 6.2.3104.0 C:\WINDOWS\system32
76360000 WINSTA.dll 5.1.2600.2180 C:\WINDOWS\system32
76380000 MSIMG32.dll 5.1.2600.2180 C:\WINDOWS\system32
76390000 IMM32.dll 5.1.2600.2180 C:\WINDOWS\system32
763b0000 comdlg32.dll 6.0.2900.2180 C:\WINDOWS\system32
76400000 NETSHELL.dll 5.1.2600.2180 C:\WINDOWS\system32
76980000 LINKINFO.dll 5.1.2600.2751 C:\WINDOWS\system32
76990000 ntshrui.dll 5.1.2600.2180 C:\WINDOWS\system32
769c0000 USERENV.dll 5.1.2600.2180 C:\WINDOWS\system32
76b20000 ATL.DLL 3.5.2284.0 C:\WINDOWS\system32
76b40000 winmm.dll 5.1.2600.2180 C:\WINDOWS\system32
76bf0000 PSAPI.DLL 5.1.2600.2180 C:\WINDOWS\system32
76c00000 credui.dll 5.1.2600.2180 C:\WINDOWS\system32
76c30000 WINTRUST.dll 5.131.2600.2180 C:\WINDOWS\system32
76c90000 IMAGEHLP.dll 5.1.2600.2180 C:\WINDOWS\system32
76d40000 MPRAPI.dll 5.1.2600.2180 C:\WINDOWS\system32
76d60000 iphlpapi.dll 5.1.2600.2912 C:\WINDOWS\system32
76e10000 adsldpc.dll 5.1.2600.2180 C:\WINDOWS\system32
76e80000 rtutils.dll 5.1.2600.2180 C:\WINDOWS\system32
76e90000 rasman.dll 5.1.2600.2180 C:\WINDOWS\system32
76eb0000 TAPI32.dll 5.1.2600.2180 C:\WINDOWS\system32
76ee0000 RASAPI32.dll 5.1.2600.2180 C:\WINDOWS\system32
76f20000 DNSAPI.dll 5.1.2600.2938 C:\WINDOWS\system32
76f50000 WtsApi32.dll 5.1.2600.2180 C:\WINDOWS\system32
76f60000 WLDAP32.dll 5.1.2600.2180 C:\WINDOWS\system32
76fb0000 winrnr.dll 5.1.2600.2180 C:\WINDOWS\System32
76fc0000 rasadhlp.dll 5.1.2600.2938 C:\WINDOWS\system32
76fd0000 CLBCATQ.DLL 2001.12.4414.308 C:\WINDOWS\system32
77050000 COMRes.dll 2001.12.4414.258 C:\WINDOWS\system32
77120000 OLEAUT32.dll 5.1.2600.2180 C:\WINDOWS\system32
771b0000 WININET.dll 7.0.5346.5 C:\WINDOWS\system32
773d0000 COMCTL32.dll 6.0.2900.2180 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9
774e0000 ole32.dll 5.1.2600.2726 C:\WINDOWS\system32
77690000 NTMARTA.DLL 5.1.2600.2180 C:\WINDOWS\system32
77920000 SETUPAPI.dll 5.1.2600.2180 C:\WINDOWS\system32
77a80000 CRYPT32.dll 5.131.2600.2180 C:\WINDOWS\system32
77b20000 MSASN1.dll 5.1.2600.2180 C:\WINDOWS\system32
77b40000 appHelp.dll 5.1.2600.2180 C:\WINDOWS\system32
77bd0000 midimap.dll 5.1.2600.2180 C:\WINDOWS\system32
77be0000 MSACM32.dll 5.1.2600.2180 C:\WINDOWS\system32
77c00000 version.dll 5.1.2600.2180 C:\WINDOWS\system32
77c10000 msvcrt.dll 7.0.2600.2180 C:\WINDOWS\system32
77c70000 msv1_0.dll 5.1.2600.2180 C:\WINDOWS\system32
77cc0000 ACTIVEDS.dll 5.1.2600.2180 C:\WINDOWS\system32
77d40000 USER32.dll 5.1.2600.2622 C:\WINDOWS\system32
77dd0000 advapi32.dll 5.1.2600.2180 C:\WINDOWS\system32
77e70000 RPCRT4.dll 5.1.2600.2180 C:\WINDOWS\system32
77f10000 GDI32.dll 5.1.2600.2818 C:\WINDOWS\system32
77f60000 SHLWAPI.dll 6.0.2900.2861 C:\WINDOWS\system32
77fe0000 Secur32.dll 5.1.2600.2180 C:\WINDOWS\system32
7c800000 kernel32.dll 5.1.2600.2945 C:\WINDOWS\system32
7c900000 ntdll.dll 5.1.2600.2180 C:\WINDOWS\system32
7c9c0000 SHELL32.dll 6.0.2900.2951 C:\WINDOWS\system32
7d4a0000 MSHTML.dll 7.0.5346.5 C:\WINDOWS\system32
7e1e0000 HHCTRL.OCX 5.2.3790.2744 C:\WINDOWS\system32

hardware:
+ Batteries
- Microsoft AC Adapter
- Microsoft ACPI-Compliant Control Method Battery
+ Computer
- Advanced Configuration and Power Interface (ACPI) PC
+ Disk drives
- IC25N020ATCS04-0
+ Display adapters
- Intel(R) 82845G Graphics Controller (driver 6.13.1.3264)
+ DVD/CD-ROM drives
- SAMSUNG CDRW/DVD SN-324B
+ Human Interface Devices
- HID-compliant consumer control device
- USB Human Interface Device
+ IDE ATA/ATAPI controllers
- Intel(R) 82801DB Ultra ATA Storage Controller - 24CB (driver 4.0.1001.0)
- Primary IDE Channel
- Secondary IDE Channel
+ Intel AIM 3.0 Codec
- AIM 3.0 Part 01 Codec Driver CH-7017-A (driver 6.13.1.3264)
- AIM 3.0 Part 01 Codec Driver CH-7017-B (driver 6.13.1.3264)
+ Intel® Unified Graphics Drivers
- Intel(R) Graphics Chipset (KCH) Driver (driver 6.13.1.3264)
- Intel(R) Graphics Platform (SoftBIOS) Driver (driver 6.13.1.3264)
+ Keyboards
- Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
+ Mice and other pointing devices
- Microsoft PS/2 Port Mouse (IntelliPoint)
+ Modems
- SENS LT56ADW Modem (driver 2.1.38.0)
+ Monitors
- Digital Flat Panel (1024x768)
+ Network adapters
- Belkin Wireless 54Mbps Notebook Adapter (driver 3.30.15.0)
- Intel(R) PRO/100 VE Network Connection (driver 6.1.3.0)
+ PCMCIA adapters
- Ricoh R/RL/RT/RC/5C475(II), R5C520 or Compatible CardBus Controller
+ Ports (COM & LPT)
- Communications Port (COM1)
- ECP Printer Port (LPT1)
+ Processors
- Intel(R) Pentium(R) 4 CPU 2.00GHz
+ Sound, video and game controllers
- Audio Codecs
- Crystal WDM AC'97 Driver for ICH4 (driver 6.13.10.6100)
- Legacy Audio Drivers
- Legacy Video Capture Devices
- Media Control Devices
- USB Audio Device
- Video Codecs
+ System devices
- ACPI Fan
- ACPI Fixed Feature Button
- ACPI Power Button
- ACPI Sleep Button
- ACPI Thermal Zone
- Direct memory access controller
- Generic Bus
- Intel(R) 82801DB LPC Interface Controller - 24C0 (driver 4.0.1001.0)
- Intel(R) 82801DB PCI Bridge - 244E (driver 4.0.1001.0)
- Intel(R) 82801DB/DBM SMBus Controller - 24C3 (driver 4.0.1001.0)
- Intel(r) 82802 Firmware Hub Device
- Intel(R) 82845G/GL Processor to I/O Controller 2560 (driver 4.0.1006.0)
- ISAPNP Read Data Port
- Microcode Update Device
- Microsoft ACPI-Compliant Embedded Controller
- Microsoft ACPI-Compliant System
- Microsoft Composite Battery
- Microsoft System Management BIOS Driver
- Motherboard resources
- Numeric data processor
- PCI bus
- Plug and Play Software Device Enumerator
- Printer Port Logical Interface
- Programmable interrupt controller
- System CMOS/real time clock
- System speaker
- System timer
- Terminal Server Keyboard Driver
- Terminal Server Mouse Driver
- Volume Manager
+ Universal Serial Bus controllers
- Intel PCI to USB Enhanced Host Controller
- Intel(R) 82801DB/DBM USB Universal Host Controller - 24C2 (driver 4.0.1001.0)
- Intel(R) 82801DB/DBM USB Universal Host Controller - 24C4 (driver 4.0.1001.0)
- Intel(R) 82801DB/DBM USB Universal Host Controller - 24C7 (driver 4.0.1001.0)
- USB 2.0 Root Hub
- USB Composite Device
- USB Root Hub
- USB Root Hub
- USB Root Hub

Carlo Trentini

I've just tried to download the Panda software, Housecall and Hijack this in safe mode ( with networking ) as per Edifier's advice, but I've had exactly the the same problems as before - D/L begins, then the window just closes and you are left looking at a blank screen. Agghh!

Any other advice would be gratly appreciated, thanks.

rayZa

Reformatting your pc is the simplest solution. If you really can't fix it.

edifier

Try to access another computer with CD burning capabilities and download and burn the following to CD to install on your machine. Or even try having it sent to you via email.

HijackThis- http://www.thespykiller.co.uk/files/HJTsetup.exe

Dr. Web CureIt- http://download.drweb.com/drweb+cureit/

If successful, run The Dr. Web Utility and post that scan log along with a HijackThis log.