Hi Guys, I have managed to connect which is rare for me! A friend recommended your website to help me solve my res: shdoclc.dll/dnserror.htm error?!

I have managed to download the relevant cleaning software as per your advice and have a hijack this log which you will find below...

I'd be very grateful if you could help me on this as its driving me crazy? Have tried everything including Norton Anti Virus but to no avail!!!

Thanks a million...

Logfile of HijackThis v1.99.1
Scan saved at 21:04:37, on 21/02/2005
Platform: Windows 2000 SP1 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\Explorer.exe
C:\WINNT\nysyfe.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Szzimth\Jbib.exe
C:\WINNT\msexploren.exe
C:\WINNT\clfmon.exe
C:\WINNT\System32\internat.exe
C:\Documents and Settings\New User\Desktop\PC FIX\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [Windows Compliant] yndudx.exe
O4 - HKLM\..\Run: [Security Antivirus Xp 1] inetfor.exe
O4 - HKLM\..\Run: [Microsoft WinUpdate] Winlogin.exe
O4 - HKLM\..\Run: [Start Upping] taksmgr.exe
O4 - HKLM\..\Run: [FBfLxr] C:\WINNT\nysyfe.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [¢‰¸ÓÝ4ö©È
¤Á<›¸ÉoUC:\Program Files\ISTsvc\istsvc.exe] C:\WINNT\nysyfe.exe
O4 - HKLM\..\Run: [Ayxxkn] C:\Program Files\Szzimth\Jbib.exe
O4 - HKLM\..\Run: [Microsofts Security Manager] qlcn.exe
O4 - HKLM\..\Run: [SvcH0st] C:\WINNT\msexploren.exe /i
O4 - HKLM\..\Run: [clfmon] C:\WINNT\clfmon.exe
O4 - HKLM\..\Run: [antiware] c:\winnt\system32\eliteeju32.exe
O4 - HKLM\..\RunServices: [Windows Compliant] yndudx.exe
O4 - HKLM\..\RunServices: [Security Antivirus Xp 1] inetfor.exe
O4 - HKLM\..\RunServices: [Microsoft WinUpdate] Winlogin.exe
O4 - HKLM\..\RunServices: [Start Upping] taksmgr.exe
O4 - HKLM\..\RunServices: [Microsofts Security Manager] qlcn.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [Windows Compliant] yndudx.exe
O4 - HKCU\..\Run: [Security Antivirus Xp 1] inetfor.exe
O4 - HKCU\..\Run: [Microsoft WinUpdate] Winlogin.exe
O4 - HKCU\..\Run: [Start Upping] taksmgr.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {1803B9EF-9905-4F34-AFC4-05D1BAB28801} (RegUserCfgUI Class) - http://us.dl1.yimg.com/download.yaho...1/yregucfg.cab
O16 - DPF: {30CE93AE-4987-483C-9ABE-F2BD5301AB70} - http://64.156.31.79/100039/uk/ringtone/ringtone.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: ZESOFT - Unknown owner - C:\WINNT\zeta.exe (file missing)

greetings Pattinson26

please follow owen's Instructions and then post your log in the Spyware, Adware, Viruses and HijackThis Logs section.




...

Thanks Jephree i have reposted it in the correct place.

Pattinson26

hi! i need your help ...my ie opening page has turned into about:blank...how can i change it? my symanted is not running because of the virus.

Greetings chachav

please follow owen's Instructions and then post your log in the Spyware, Adware, Viruses and HijackThis Logs section.