Trojan Startpage 19.j removal help! Another One!

Posted 4/12/2003 6:14 AM
#12755
User avatar

Vikings Member

Date Joined Nov 2016
Total Posts: 5
Hi again. <br/>To add insult to injury, after another running of AVG anti-virus software when attempting to open Internet explorer i get a RUNDLL Error message and no further loading of Internet explorer. <br/>Anyone any ideas? <br/>Thanks, <br/>V
Posted 4/12/2003 9:26 AM
#12760
User avatar

Vikings Member

Date Joined Nov 2016
Total Posts: 5
Posted 4/10/2005 5:24 PM
#12656
User avatar

Vikings Member

Date Joined Nov 2016
Total Posts: 5
Hello, <br/> <br/> <br/> my computer unfortunately became infected with this virus on Friday last week. AVG detects it fine but is unable to remove it. Any help would be very gratefully received. <br/> <br/>The hijackthis diagnostic is as follows: <br/> <br/> <br/> <br/>Logfile of HijackThis v1.99.1 <br/>Scan saved at 18:23:41, on 10/04/2005 <br/>Platform: Windows XP (WinNT 5.01.2600) <br/>MSIE: Internet Explorer v6.00 (6.00.2600.0000) <br/> <br/>Running processes: <br/>C:\WINDOWS\System32\smss.exe <br/>C:\WINDOWS\system32\winlogon.exe <br/>C:\WINDOWS\system32\services.exe <br/>C:\WINDOWS\system32\lsass.exe <br/>C:\WINDOWS\system32\svchost.exe <br/>C:\WINDOWS\System32\svchost.exe <br/>C:\WINDOWS\system32\spoolsv.exe <br/>C:\WINDOWS\Explorer.EXE <br/>C:\Program Files\iTunes\iTunesHelper.exe <br/>C:\Program Files\QuickTime\qttask.exe <br/>C:\Program Files\Common Files\Real\Update_OB\realsched.exe <br/>C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe <br/>C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe <br/>C:\WINDOWS\System32\ctfmon.exe <br/>C:\Program Files\MSN Messenger\msnmsgr.exe <br/>C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe <br/>C:\Program Files\Sony\OpenMG Jukebox\Omgtray.exe <br/>C:\Program Files\OLYMPUS\CAMEDIA Master 4.1\CM_camera.exe <br/>C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe <br/>C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe <br/>C:\WINDOWS\System32\ZoneLabs\vsmon.exe <br/>C:\Program Files\iPod\bin\iPodService.exe <br/>C:\Program Files\Internet Explorer\iexplore.exe <br/>C:\WINDOWS\System32\wuauclt.exe <br/>C:\WINDOWS\System32\wuauclt.exe <br/>C:\WINDOWS\System32\rundll32.exe <br/>C:\Documents and Settings\Helen\Local Settings\Temp\Temporary Directory 2 for hijackthis.zip\HijackThis.exe <br/> <br/>R1 - HKCU\Software\Microsoft\Internet Explorer,Search = http://in.webcounter.cc/--/?ydtfs (obfuscated) <br/>R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://in.webcounter.cc/--/?ydtfs (obfuscated) <br/>R1 - HKLM\Software\Microsoft\Internet Explorer,Search = http://in.webcounter.cc/--/?ydtfs (obfuscated) <br/>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://in.webcounter.cc/-/?ydtfs (obfuscated) <br/>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://in.webcounter.cc/--/?ydtfs (obfuscated) <br/>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\Helen\LOCALS~1\Temp\se.dll/spage.html <br/>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank <br/>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lookfor.cc?pin=28129 <br/>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://lookfor.cc/sp.php?pin=28129 <br/>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\Helen\LOCALS~1\Temp\se.dll/spage.html <br/>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank <br/>R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank <br/>R1 - HKCU\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://in.webcounter.cc/--/?ydtfs (obfuscated) <br/>R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank <br/>R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://in.webcounter.cc/--/?ydtfs (obfuscated) <br/>R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank <br/>R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\SYSTEM\blank.htm <br/>R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank <br/>O2 - BHO: (no name) - {569E8ACD-BBF9-4010-807D-304B8B552885} - C:\WINDOWS\System32\dpjg.dll <br/>O4 - HKLM\..\Run: [SystemTray] SysTray.Exe <br/>O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe <br/>O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime <br/>O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot <br/>O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe <br/>O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP <br/>O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe <br/>O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe <br/>O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background <br/>O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot <br/>O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE <br/>O4 - Global Startup: OpenMG Jukebox Startup.lnk = C:\Program Files\Sony\OpenMG Jukebox\Omgtray.exe <br/>O4 - Global Startup: CAMEDIA Master.lnk = C:\Program Files\OLYMPUS\CAMEDIA Master 4.1\CM_camera.exe <br/>O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html <br/>O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html <br/>O8 - Extra context menu item: Backward Links - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html <br/>O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html <br/>O8 - Extra context menu item: Cached Snapshot of Page - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html <br/>O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html <br/>O8 - Extra context menu item: Similar Pages - res://C:\PROGRAM FILES\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html <br/>O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html <br/>O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll <br/>O16 - DPF: Win32 Classes - <br/>O16 - DPF: {11010101-1001-1111-1000-110112345678} - ms-its:mhtml:file://C: oo.mht!http://cellaphone.net/helps/079057/iehelp.chm::/win.exe <br/>O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/06aa55f310bde608f219/netzip/RdxIE601.cab <br/>O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111997342348 <br/>O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - http://daisy.rsmi.co.uk/webview/msxml/msxml4.cab <br/>O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab <br/>O18 - Filter: text/html - {59D19362-2E8A-49B7-B98A-21345C0614D2} - C:\WINDOWS\System32\dpjg.dll <br/>O18 - Filter: text/plain - {59D19362-2E8A-49B7-B98A-21345C0614D2} - C:\WINDOWS\System32\dpjg.dll <br/>O19 - User stylesheet: C:\WINDOWS\Web\tips.ini <br/>O19 - User stylesheet: C:\WINDOWS\hh.htt (HKLM) <br/>O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe <br/>O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe <br/>O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe <br/>O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe <br/>O23 - Service: SpywareCleanerService - Secure Computer, LLC - C:\Program Files\Spyware Cleaner\SCService.exe <br/>O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\System32\ZoneLabs\vsmon.exe <br/> <br/> <br/> <br/>Many thanks in advance. <br/> <br/>V
  • Unread posts or replies
  • No unread posts or replies
  • Unread Posts (Read Only Forum)
  • No Unread Posts (Read Only Forum)

Forum Information

Currently it is Tuesday, December 6, 2016, 11:02 PM (GMT +1)
There are a total of 61,160 posts in 13,449 threads.
In the last 3 days there were 0 new threads and 0 reply posts.

Who's online

This forum has 37,965 registered members. Please welcome our newest member, Old shape.
There are currently no users on-line.