"My Way Speedbar"

[KateB]

This program seemed to download onto my pc from the internet by itself. I was trying to download kazaa which didnt work out and then i suddenly noticed this "my way" folder. Stupidly i started deleting it (from the recycle bin too:eek: ) For a couple of files it kept saying 'access denied' , refused to let me get rid of them. If only i'd gone to the add/remove programs first. It appears in the list as "My way speedbar" but when i click remove, it says 'error, cant locate uninstall.inf file' which i obviously must have deleted. I've tried downloading the program from the net just to get another copy of the 'uninstall.inf' file but that wont work either. It says 'you already have this installed on your computer'

[tb525]

Hi KateB, Let's have a look, Download 'Hijack This!'.

http://www.spywareinfo.com/files/hijackthis.zip

Unzip, doubleclick HijackThis.exe, and hit "Scan".
When the scan is finished, click "Save Log", and copy and paste it in a reply

[KateB]

Thanku tb525. I emailed "my way speedbar" last night and they replied with a link to download an uninstaller file and it worked. So thats alright now.
I've done the "hijack this scan" anyway as recently there's been another problem on my computer. I'm suddenly getting loads of popup ads, far more than usual. Is there anything in this list that i dont need?

Logfile of HijackThis v1.94.0
Scan saved at 19:55:53, on 05/06/2003
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page=http://www.radiohead.com/msgboard
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page=C:\WINDOWS\System32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page=%SystemRoot%\system32\blank.htm
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {39AF31DD-EAFC-45EA-A56C-385B52E25CC0} - c:\windows\iexplorr22.dll
O2 - BHO: (no name) - {4CEBBC6B-5CEE-4644-80CF-38980BAE93F6} - c:\windows\iexplorr23.dll
O2 - BHO: (no name) - {6B12DABB-0B7C-44FA-B0B3-4BAFF3790256} - c:\windows\iexplorr24.dll
O2 - BHO: (no name) - {BC0D2038-2DE5-4A6F-92BC-B18A3E0DE32A} - c:\windows\iexplorr11.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://207.188.7.150/29d9dea91e81de626e21/netzip/RdxIE601.cab
O16 - DPF: {79B96C72-C0D0-4DC8-BC7E-9F314A918228} - http://imgfarm.com/images/nocache/myspeedbar/myinitialsetup1.0.0.3.cab

[tb525]

Hi Kate, Close all browser windows, run HT again and have it fix the following entries. Reboot when done.
These are all the parasite InetSpeak.
(http://www.doxdesk.com/parasite/InetSpeak.html).


O2 - BHO: (no name) - {39AF31DD-EAFC-45EA-A56C-385B52E25CC0} - c:\windows\iexplorr22.dll
O2 - BHO: (no name) - {4CEBBC6B-5CEE-4644-80CF-38980BAE93F6} - c:\windows\iexplorr23.dll
O2 - BHO: (no name) - {6B12DABB-0B7C-44FA-B0B3-4BAFF3790256} - c:\windows\iexplorr24.dll
O2 - BHO: (no name) - {BC0D2038-2DE5-4A6F-92BC-B18A3E0DE32A} - c:\windows\iexplorr11.dll

[KateB]

:) It's worked

How do you think they got onto my computer? They remind me of the windows update patches but im not sure

[tb525]

They are definitely not windows update patches. More than likely they came from a 'drive-by download'. Or if have you ever download any of the following:
'Morpheus Upgrade', 'Music Magnet', or 'eBoom'

[KateB]

must have been the 'kazaa' then.im gonna try soulseek instead