too

you just never know

plus you seem to be expert help

anyways

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:16:11 PM, on 5/5/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\APC\apcsystray.exe
C:\Program Files\APC\mainserv.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Opera\Opera.exe
C:\Documents and Settings\Gary\My Documents\Taskbar\RuneScape.exe
C:\Program Files\Java\jre6\bin\java.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [IntelAudioStudio] "C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe" BOOT
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - Global Startup: APC UPS Status.lnk = ?
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownlo.../sysreqlab2.cab
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\mainserv.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Program Files\RealVNC\VNC4\WinVNC4.exe (file missing)

--
End of file - 3299 bytes

, nicks problem stuck out like a delimbed

c:\imafuckingvirus.exe

ya

and all your stuffs legit

t4t

Finding nothing useful.

Shit happens to fall into, "this is a virus category but we don't know what to do" or "lsass.exe is necessary for Windows to function" (obviously the \system32 clearly c:\).

same, and i dont have time to do any serious googling because of homework, maybe tn8

you can register and poop your problem on a malware forum, but it can take 1-2 days to get a reply

do you have a regular antivirus running on your pc?

Nah

your proalbem seems to be super old, probably any up to date full antivirus program would handle it, and thats why you dont find any recent info on it through google

if you are lucky, that will be the case

Just from the ones I read, they don't seem very useful, they follow this trend:

1) poop Problem
2) Guy responds to poop a Hijack This log
3) poop Hijack This log
4) Guy responds to poop a ComboFix/GMER/etc log
5) poop [etc] log
6) Guy has no idea what to do
7) pooper with problem has no idea what to do

Just going to manually delete the file and see what happens.

that is usually what happens when the person trying to help has no first-hand experience with the problem, because any info they can find would be off google too, but if you get lucky and someone who has seen it before poops, they will tell you the step-by-step to fix it

didnt you try this already
it will tell you that you dont have access to delete it if you try it right now, if you try it in safe mode, it will either go away, or spawn right back when you reboot into normal mode

if you are really having problems its generally easier to just reformat

thats like nuking the middle east for the sole purpose of killing terrorists, quitter

I just tried to stop it in Task Manager, but same shit, can't delete it.

stopping it in task manager accomplishes the same thing that booting in safe mode does, by killing the application from running, the goal is to remove its feature of "protecting itself" from you deleting it
then you go in and manually delete it (empty recycle bin, etc)

anyways you are right, even if you delete 99% of the virus, the 1% that is still running will just replicate everything you deleted and so on

get duped to help you

Maybe this is a sign.

it's clearly hard, I promise

proal

computers like fire i hear

I think what you're referring to by this is some worm virus that happened with the system32\lsass.exe

Formatting is the last option faggots.

what's your point? i see nothing wrong with this.




the effort you put into trying to fix it w/o formatting is like three times as much effort than just reformatting.

NOOB

Yeah, because the hour or so of reinstalling windows, then finding drivers, then getting the interwebs to work again, reinstall applications, installing WoW for like 6 hours sounds worth it.

backup your stuff..non noobs get it done fast

can't beat the feel of a fresh format

there's a site you can go to for drivers for any model of computer, back your shit up and reformat shouldn't take more then a couple hours tops

Do a system restore back to a date that your computer actually worked.

I downloaded Microsoft Security Essentials, and it got rid of my C:\lsass.exe, but somehow my Network Adapter got uninstalled doing it. So I couldn't get back on the internet, and after some time of frustration, I reformatted, to have the same problem, and I just now finally figured out how to get back on the interwebs.

So, tl;dr, new fresh format.

gz

dont install wow

Installing League of Legends

good man.

just never reinstall wow, don't visit your guild website

and remember to stop payment

addiction cured

Im greedy and want pg 3