1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

iquicksearch.com help...

Discussion in 'Virus & Other Malware Removal' started by jonnyblazini, Apr 25, 2004.

Thread Status:
Not open for further replies.
Advertisement
  1. jonnyblazini

    jonnyblazini Thread Starter

    Joined:
    Apr 25, 2004
    Messages:
    59
    hey im new to this and im sure this has been brought up many times but ive seen people post logs from hijackthis, i think was the name of the program, and seen their problems get fixed like that. i was wondering where i could get that program and if anyone on here could help me get rid of this iquicksearch thing. help would be greatly appreciated if you all haven't been annoyed to death with this problem.... thank you!
     
  2. Byteman

    Byteman Gone but Never Forgotten

    Joined:
    Jan 24, 2002
    Messages:
    17,742
    Hi, One way to find the location of almost any program available for download is to use a search engine, like Google.com. HJThis can be found several places...here are two:

    http://s89223352.onlinehome.us/mirror/hjt/

    There is the Quick Start Guide, with directions to get your log copied and pasted into a reply in this thread.

    Please note that the HijackThis Button link there does NOT work, however the link just down on the left under
    Hijackthis From Here.....does.

    it's in .zip form, so you will need to use an unzipping program unless you have windows ME or above.

    Here is one in .exe form:

    http://www.spywareinfo.com/~merijn/downloads.html

    See under "Unable to download" for this form, which you can just Save onto your hard drive- you do need to create a folder, call it HJT or something, first- direct the download to that folder and run Hijackthis.exe from there.
    Copy/paste the log HJT makes after you hit the Scan button, Save the log, etc. Have ALL web windows closed when you are using HJT to FIX anything, later on....for the SCAN part, now, getting started.... you can leave the Quick Start Guide open... but not after when you are going to remove anything, close all web windows then, scan, and put a check into what someone advises you remove and click Fix Checked. Please do not remove anything without advice as HJT shows both good and bad entries.
     
  3. jonnyblazini

    jonnyblazini Thread Starter

    Joined:
    Apr 25, 2004
    Messages:
    59
    hey.. thank you for responding but i got that taken care of just a bit ago. now i just have to figure out why certain web pages like clubphoto.com that i used to go to, come up with "page cannot be displayed". i tried uninstalling IE and re installing it, tried adding it to the trusted sites, nothin seems to work. thank you for responding and if u know anything about that other problem of mine, lemme know or somethin. thank you again
     
  4. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    hi, could you post a hijack this log so we can see what processes are running on your computer as byteman suggested?

    khaz
     
  5. jonnyblazini

    jonnyblazini Thread Starter

    Joined:
    Apr 25, 2004
    Messages:
    59
    Logfile of HijackThis v1.97.7
    Scan saved at 6:57:51 PM, on 4/26/2004
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\spoolsv.exe
    C:\WINNT\system32\CTSvcCDA.EXE
    C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
    C:\PROGRA~1\SYMANT~1\SYMANT~1\DefWatch.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\PROGRA~1\SYMANT~1\SYMANT~1\Rtvscan.exe
    C:\WINNT\system32\nvsvc32.exe
    C:\Program Files\Kodak\Kodak EasyShare software\bin\ptssvc.exe
    C:\WINNT\system32\regsvc.exe
    C:\WINNT\system32\MSTask.exe
    C:\WINNT\system32\ScsiAccess.EXE
    C:\WINNT\system32\stisvc.exe
    C:\WINNT\system32\ZoneLabs\vsmon.exe
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\system32\MsPMSPSv.exe
    C:\WINNT\system32\svchost.exe
    C:\Program Files\WUSB11 WLAN Monitor\WLService.exe
    C:\Program Files\WUSB11 WLAN Monitor\WUSB11B.exe
    C:\WINNT\Explorer.EXE
    C:\WINNT\system32\mobsync.exe
    C:\WINNT\SOUNDMAN.EXE
    C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
    C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    C:\WINNT\system32\ctfmon.exe
    C:\Program Files\AIM95\aim.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINNT\system32\RUNDLL32.EXE
    C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
    C:\Program Files\SpywareGuard\sgmain.exe
    C:\WINNT\webshots.scr
    C:\Program Files\SpywareGuard\sgbhp.exe
    C:\Program Files\Trillian\trillian.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\WINNT\explorer.exe
    C:\Documents and Settings\sjostrom\Desktop\downloaded shiz\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
    O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
    O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM95\aim.exe -cnetwait.odl
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\system32\NVMCTRAY.DLL,NvTaskbarInit
    O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
    O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
    O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\ipsecdialer.exe
    O4 - Global Startup: DriveSelect.lnk = C:\Program Files\321Studios\Xpress\DriveSelect.exe
    O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    O4 - Global Startup: Kodak EasyShare software.lnk = C:\Program Files\Kodak\Kodak EasyShare software\bin\EasyShare.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: AIM (HKLM)
    O9 - Extra button: PartyPoker.com (HKLM)
    O9 - Extra 'Tools' menuitem: PartyPoker.com (HKLM)
    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
    O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0401.cab
    O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB
    O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52...pple.com/mickey/us/win/QuickTimeInstaller.exe
    O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - http://www.ipswitch.com/_installs/wsftp_le/setup.exe
    O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx
    O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?38023.8816319444
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/aio/eng/check/qdiagh.cab?315
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
     
  6. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    hi, that log looks clean. are you having any problems?

    khaz
     
  7. jonnyblazini

    jonnyblazini Thread Starter

    Joined:
    Apr 25, 2004
    Messages:
    59
    well now the only problem i have is that im a member at clubphoto.com and and was trying to go there but it wont load the page and always says "page cannot be displayed", it used to say iquicksearch.net, but someone had me run that hijackthis and fix that problem. so now its just "page cannot be displayed" instead...and i tried to add it to my trusted sites, and even re install IE, but nothin seems to help...
     
  8. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    see if they have changed their address, or try another browser like mozilla1.6 or their firebird.

    www.mozilla.com
     
  9. jonnyblazini

    jonnyblazini Thread Starter

    Joined:
    Apr 25, 2004
    Messages:
    59
    well i tried downloading mozilla and it still didnt show up and i asked a friend if the address worked on their computer and they said it did, so i dont know... but thank you very much for your help
     
  10. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/223859

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice