jaycabs

cant find any were in add or remove , ie7 and looking on the net every were seems to say look for it there to remove it , i tried to over install ie7 that way and it just doesnt want to know as it tells me to look for updates but when i do that there is and active x needed but obviously with this probelm i have , the active x wont come up like it use to at the top of the screen . i know ie8 beta installs to replace ie7 but as you know earlier were i said that didnt help. any ideas ????

sorry lol my mistake as i thought . just so curious about it because of how destructive it was in comparison to other trojans.

had a quick look at that and it doesnt say much but is it me or does it say as if it was made by kaspersky ? if it was then why would they be allowed to send out such a destructive virus ? or did i read that wrong ?

just curious if any one has came across this in the past as i have only once about a year ago when then i was using avg free edition and it was the most destuctive virus my computer has ever came across as it ruined 1100 files . i know obviously no one wants to get it but just seems strange were there is so many common trojans that repeatedly pop up but the kxn was like a one off .

still waiting to get the time to reinstall ie7 lol, not much time around work and being so tired :( i will get round to it though and tell you if it fixies the problem

cheers seth , i might b asleep in couple of hours though lol .

done that now , here you go . i asume you know what to read in this of whats bad ? Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:43:21, on 10/11/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\Program Files\Kontiki\KService.exe C:\WINDOWS\System32\PAStiSvc.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\WebUpdateSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\sm56hlpr.exe C:\WINDOWS\system32\VTTimer.exe C:\WINDOWS\system32\VTtrayp.exe C:\WINDOWS\Philips\SPC500NC\Monitor.exe C:\Program Files\SweetIM\Messenger\SweetIM.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\vghd\vghd.exe E:\PROGRAMMES INSTALLED\Vista Inspirat 2\RocketDock\RocketDock.exe E:\PROGRAMMES INSTALLED\Vista Inspirat 2\UberIcon\UberIcon Manager.exe E:\PROGRAMMES INSTALLED\Vista Inspirat 2\YzShadow\YzShadow.exe C:\Program Files\vghd\VirtuaGirl_downloader.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo! SearchBar Home Page R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.my.yahoo.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Live Search R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Live Search R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = Mistyped URL: /?url= O2 - BHO: WhgHelper Class - {00000000-0000-11D1-ABED-709549C10000} - C:\Program Files\WHG\Instant Help Application Update 1.2\IEHelper.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\ievkbd.dll O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O4 - HKLM\..\Run: [sMSERIAL] sm56hlpr.exe O4 - HKLM\..\Run: [VTTimer] VTTimer.exe O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [sPC500NC_Monitor] C:\WINDOWS\Philips\SPC500NC\Monitor.exe O4 - HKLM\..\Run: [sweetIM] C:\Program Files\SweetIM\Messenger\SweetIM.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [kdx] C:\Program Files\Kontiki\KHost.exe -all O4 - HKCU\..\Run: [WallpaperSpinner] E:\PROGRAMMES INSTALLED\WallpaperSpinner\WallpaperSpinner.exe O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: DesktopVideoPlayer.LNK = C:\Program Files\vghd\vghd.exe O4 - Startup: RocketDock.lnk = E:\PROGRAMMES INSTALLED\Vista Inspirat 2\RocketDock\RocketDock.exe O4 - Startup: TransBar.lnk = E:\PROGRAMMES INSTALLED\Vista Inspirat 2\TransBar\TransBar.exe O4 - Startup: UberIcon.lnk = E:\PROGRAMMES INSTALLED\Vista Inspirat 2\UberIcon\UberIcon Manager.exe O4 - Startup: Y'z Shadow.lnk = E:\PROGRAMMES INSTALLED\Vista Inspirat 2\YzShadow\YzShadow.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\SCIEPlgn.dll O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\system32\shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/pcpitstop.cab O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1169055446140 O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) - http://download.divx.com/player/DivXBrowserPlugin.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1196213035578 O16 - DPF: {A90A5822-F108-45AD-8482-9BC8B12DD539} (Crucial cpcScan) - http://crucial.com/controls/cpcScanner.cab O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} (Live Collaboration) - https://livenj04.custhelp.com/8201-b499h/rnl/java/RntX.cab O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100 O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) - http://utilities.pcpitstop.com/Optimize2/pcpitstop2.dll O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe O23 - Service: Web Update Service by PowerProgrammer (WebUpdate) - Data Perceptions / PowerProgrammer - C:\WINDOWS\system32\WebUpdateSvc.exe -- End of file - 9358 bytes

just tried all the scans and they did clear up alot of stuff but didnt stop the problem , but with firefox it all works ok :) . does that help much in finding the problem ?

i managed to get internet explorer 7 back and running again but about the advanced part and reseting , didnt work :confused: . ive also noticed since this problem too that some sites that keep usernames and passwords so to make quicker access evwn when u tick " remember me " , they seem to not remember too . shouldnt kaspersky sort out any malware issues ? about a month ago i use to use windows live one care but found out kaspersky picked up on more things so thats why i changed to them. by the way , thank you for such quick responding too :)

i keep trying to re-install windows internet explorer 7 but it start then stops shortly after saying " setup cannot continue because a more recent version of internet explorer has been installed on this computer " never had that come up before ?

ok cheers i will try that , thanks

hi every one . im not sure if this is the right section to put this but recently about a week ago i opened an email not realising my antivirus software was turned off and when i opened it suddenly tabs repeatedly kept opening with out me having any control of my computer besideds manualy turning it off . ever since then many web pages dont seem to fully work . example 1 : a web page were i caqn get screen savers for my mobile , it askes you to vote on a star system for the picture before you can have it but since this problem the you press on a choice of stars but it gets stuck in motion so doesnt complete rigistering what you chose so no screen save to be had :-( . example 2 : when i use ebay , on the left hand side were the options are you normaly get a bit saying " choose more " for a larger selection of options but now since theproblem it just opens up a new tap of the whole same page and doesnt bring up the small tab overlaying the main page with the bigger options . example 3 : my yahoo mail , i use to run yahoo mail beta ( the newest version ) but ever since that problem it loads the page but suddenly it goes to a fault problem page were if i choose to retry it lets me dfo that but as i start to scroll down my messages it gets stuck in motion again saying " loading" but never finishies so agaon it wont let me read my mail there so if i choose to read though yahoo mail classic then it works to read my mail. yahoo gave me some small advice going through "tools" then "nternet options" then in "genral" then to " delete browser history " . also they asked me to go into "security" then " custom level " then " run active x controls and plug-ins " and also " script active x controls marked for safe scripting " but none of that helped. i was running windows internet explorer 7 but just for a try to see if it changed any thing i went to the newer windows internet explorer 8 beta but they didnt change any thing . im using also kaspersky anti-virus software and using registry fixers too but they are not finding any thing that stops this problem . im not sure what other info you might need but i hope this is just a simple problem that some one might be able to put some light on so it can be delt with as its very frustrating . thank you for any help if any one can solve this ?