spylocked 3.9

[nelu]

Hi
I'm new to this forum and i need some help. I think I got infected with spylocked 3.9 and i don't know what to do. Every thing what i read doesn't say anything about v 3.9  . I did scan the computer with AVG but the result was no threats found . Also i saw some programs in program files and i am sure something is wrong with them (directX 9 hotfix-kb839643 and around 20 like windows 2000 hotfix - kb ......... ).
I appreciate any help.
Thank you.

[GTO]

Hi nelu. Welcome to the 2-Spyware.com forums!

Please download the HijackThis 1.99.1 program, run a scan and post your log here.

[nelu]

Hi again,
Looks like i got rid of it... I did run SpyNoMore and after that i clean it manual . Took me couple of hours but it was a success ( at least i don't see any problem now).

[turnip]

Sorry to take over but I'm having the same problem. Here is my log.
You don't know how much I would appreciate some help.

I would love to visit Latvia and thank personnaly the schmucks who are doing this!!!


Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:43:45 PM, on 5/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Video ActiveX Access\iesmn.exe
C:\Program Files\Video ActiveX Access\imsmain.exe
C:\WINDOWS\system32\nvraidservice.exe :twisted:  :twisted:

[GTO]

Hi turnip. Welcome to the 2-Spyware.com forums!

Please create a new thread in the HijackThis log analysis section and post your log here. In that forum section we work with individual threads only. Posting logs to other user threads is unacceptable here.

Make sure you post the full log, not only the processes section. Also, please use HijackThis 1.99.1, as we don't accept BETA version logs yet.